The access control list (ACL) structure is invalid.
Error code: 2147943736

Checking for a Console Service Account that already exists on the Domain.

1. To check what account is being used by the Ghost Console, open the Ghost Console, click Tools > Supported Domains List.
2. Here you can note the Console Service Account,
3. Check that this account doesn't already exist in your Active directory users list on your Domain Controller.
   • If this account already exists in Active Directory, remove the account.
     1. In the Ghost Console, click Tools > Supported Domains List…
        • Here you can Add/Remove Domains from the list or you can Edit the Console Service Account.
     2. Click Add.
     3. In the Domain field, enter the NetBIOS name of the Domain. (You may also click Browse to find the name of the domain.)
     4. Uncheck the box for Create Console Service Account in the domain and Click OK.
   • If the account does not exist, continue down this document for other solutions.

Shortening the length of the Console Service account and confirming the password meets the network complexity rules.

1. In the Ghost Console, click Tools> Supported Domains List…
   • You can Add/Remove Domains from the list or you can Edit the Console Service Account.
2. Click Edit.
3. Confirm that the User name is under 15 characters.
4. Ensure that your password meets the complexity requirements of your network.
5. Click OK
6. Click Add on the Domain administration page.
7. In the Domain field, enter the NetBIOS name of the Domain. (You may also click Browse to find the name of the domain.)
8. In the appropriate fields, specify the Name and Password of a user with authority to create the Console Service Account on the domain.
9. Click OK.

References
"Symantec Technology Network: Symantec Ghost Solution Suite" at:

Deployment and Imaging Group