• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 9299
  • Last Modified:

The launch and activation security descriptor for the COM Server application with CLSID XXX is Invalid - After W2003 SP1 Upgrade

Just put Windows Server 2003 SP1 on our machines, and noticed in some of them the following is logged in evt log at boot:

The launch and activation security descriptor for the COM Server application with CLSID
{FAE43F97-2227-4763-AE54-7C5E17A7D4FE}
 is invalid. It contains Access Control Entries with permissions that are invalid. The requested action was therefore not performed. This security permission can be corrected using the Component Services administrative tool.

Now, I have two questions

1. Is there any way to find out what {FAE43F97-2227-4763-AE54-7C5E17A7D4FE} actually refers to so I know what program / etc this is about?
2. How do I use Component Services to fix it?
0
jbreg
Asked:
jbreg
  • 6
  • 3
  • 2
1 Solution
 
alimuCommented:
If you open up component services, expand your computername
you haven't said what the source for this error was..
If it's DCOM you should try the DCOM Config subtree for this first
-drill down to COM+ applications/DCOM Config depending on the error source in eventviewer
-switch to a detail view,
-objects will show up in the right hand pane with an application ID against them.  *hopefully* the clsid above will show up there so you can identify the problem component.

Right clicking the object and going to properties you will see a "security" tab where you should be able to resolve permissions issues.
hope this helps,
if you need further assistance with fixing security, you'll need to advise what is currently setup on the problem component (and what the component is if possible).
0
 
jbregAuthor Commented:
Source is DCOM indeed

Nice, got it. The program is ServiceKeeper (http://www.activeplus.com/us/products/skeeper) a great little utility that allows monitoring of windows services, and notifies you when they are not running and can attempt to restart, etc. Under "launch and activation permissions" it is set to customise and when I click has everyone has deny permissions for every function listed. Access permissions are set to default, config are custom with only system and admins having full access.

What do I change? Why is it barking?
0
 
alimuCommented:
not sure for that one - the cleanest way to do it would be an uninstall/reinstall of the tool if that's a simple operation for you & you still have a copy of the software.  
Otherwise you could try doing something like copying the security config for a working windows util (eg: automatic windows update) - minimum config being admin and system full rights, users read.....  begs the question why it would have been setup with deny permissions on launch/activation in the first place tho'.
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
alimuCommented:
Hi jbreg - how'd you go with this?
0
 
jbregAuthor Commented:
I have contacted the vendor directly--will post a response when I hear more.
0
 
alimuCommented:
Haven't I answered your question (both of them) already?
0
 
jbregAuthor Commented:
Yes, thanks--the manufacturer advised to change the security settings for launch and activation to default, fyi...
0
 
alimuCommented:
thanks jbreg.
0
 
JR1Commented:
Thanks to this Q and A, I have identified the source of my DCOM errors and have contacted the vendor regarding the property security so I can make the changes. To take this a step further, could these DCOM errors cause the server's networking functions to cease? This is the problem I've been having. Our first indication of a problem is that n/w printing ceases. But it goes beyond that. The clients can still see the server but the server can not see nor access the clients. A hard re-boot solves the problem but that is very inconvenient and problematic.
0
 
alimuCommented:
It depends what the utility does to the server communications when it hangs/crashes.  I would probably ask this as a new question if you can't get any info out of the vendor about it.  
What I'd recommend until you can get it fixed is uninstalling the utility, setting the recovery options on each windows service so that they'll automatically restart on failure and finding another way to monitor it until this gets sorted out (maybe just perfmon alerting would do it?)
cheers,
alimu.
0
 
JR1Commented:
Thank you alimu. I will try our suggestion(s) and see what results I get.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 6
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now