Error 1067- on start OpenSSH by net start opensshd in windows cmd

user6209804 picture user6209804 · Sep 4, 2016 · Viewed 21.3k times · Source

I try to start opensshd app by following command line: net start opensshd but i encounter below message after press enter in CMD:

 The OpenSSH Server service is starting.

The OpenSSH Server service could not be started.

A system error has occurred.

System error 1067 has occurred.

The process terminated unexpectedly.

i install openssh. please Help Me!

Answer

Raymond Chiu picture Raymond Chiu · Nov 22, 2019

I got the similar problem that i cannot startup the "OpenSSH SSH Serve" service after following the instructions in https://hostadvice.com/how-to/how-to-install-an-openssh-server-client-on-a-windows-2016-server/

I later on found out that this is the security problem in the C:\ProgramData\ssh\ssh_host*key files. All the key files in this folder should ONLY be owned by following 2 system users:

  1. BUILTIN\Administrators
  2. NT AUTHORITY\SYSTEM

In the Powershell under the C:\ProgramData\ssh folder, issue following command can list out the owners of the file ssh_host_dsa_key:

 PS C:\ProgramData\ssh> icacls .\ssh_host_dsa_key
 .\ssh_host_dsa_key BUILTIN\Administrators:(F)
                    NT AUTHORITY\SYSTEM:(F)
                    xxdomain\otheruser:(M)

 Successfully processed 1 files; Failed processing 0 files

Obviously we need to remove the user "xxdomain\otheruser" from the owner list

Resolution

Updated on Nov 25, 2019: Found out that the OpenSSH-Win64.zip file already contained a powershell script: FixHostFilePermissions.ps1

What you need to do is to run following inside the powershell:

cd 'C:\Program Files\OpenSSH-Win64'
.\FixHostFilePermissions.ps1

And press 'Enter' for each question to update the permission.