Parallels Proxy configuration fails: Could not publish service information to Active Directory: -2147024809 (The parameter is incorrect)

Symptoms

• Parallels Proxy configuration fails: Could not publish service information to Active Directory: -2147024809 (The parameter is incorrect):

  

Log

On Parallels Configuration Manager Proxy server the following entries can be found in C:\Windows\Logs\pma_isv_proxy_config.log:

10-17 10:44:48.070 W /AdsiWrap:2948:1bdc/ IADsSecurityUtility::ConvertSecurityDescriptor() failed : error= 0x80070057
10-17 10:44:48.133 W /AdsiWrap:2948:1bdc/ IADsSecurityUtility::ConvertSecurityDescriptor() failed : error= 0x80070057
10-17 10:44:48.211 W /AdsiWrap:2948:1bdc/ IADsSecurityUtility::ConvertSecurityDescriptor() failed : error= 0x80070057
10-17 10:44:48.273 W /AdsiWrap:2948:1bdc/ IADsSecurityUtility::ConvertSecurityDescriptor() failed : error= 0x80070057
10-17 10:44:48.352 W /AdsiWrap:2948:1bdc/ IADsSecurityUtility::ConvertSecurityDescriptor() failed : error= 0x80070057
10-17 10:44:48.430 W /AdsiWrap:2948:1bdc/ IADsSecurityUtility::ConvertSecurityDescriptor() failed : error= 0x80070057

...
10-17 10:45:57.821 W /CmProxyCfgUtils:2948:28b4/ Error 80070057 (The parameter is incorrect)
10-17 10:45:57.821 F /pma_isv_proxy_config:2948:28b4/ Could not publish service information to Active Directory: -2147024809 (The parameter is incorrect)

Cause

The issue is caused by the large discretionary access control list in the Security Descriptors Parallels Configuration Wizard checks.

Resolution

1. On Domain Controller server open ADSI Edit.
2. Navigate to CN=ParallelsServices,CN=System,DC=domain container > right-click it > Properties > Security > Advanced.
3. Decrease the amount of the access control entries (permissions entries) removing entries that are not really needed for this container.
4. Run Parallels Proxy configuration again.