?
Solved

The launch and activation security descriptor for the COM Server application with CLSID XXX is Invalid - After W2003 SP1 Upgrade

Posted on 2005-05-14
11
Medium Priority
?
9,191 Views
Last Modified: 2012-05-05
Just put Windows Server 2003 SP1 on our machines, and noticed in some of them the following is logged in evt log at boot:

The launch and activation security descriptor for the COM Server application with CLSID
{FAE43F97-2227-4763-AE54-7C5E17A7D4FE}
 is invalid. It contains Access Control Entries with permissions that are invalid. The requested action was therefore not performed. This security permission can be corrected using the Component Services administrative tool.

Now, I have two questions

1. Is there any way to find out what {FAE43F97-2227-4763-AE54-7C5E17A7D4FE} actually refers to so I know what program / etc this is about?
2. How do I use Component Services to fix it?
0
Comment
Question by:jbreg
  • 6
  • 3
  • 2
11 Comments
 
LVL 14

Accepted Solution

by:
alimu earned 2000 total points
ID: 14004775
If you open up component services, expand your computername
you haven't said what the source for this error was..
If it's DCOM you should try the DCOM Config subtree for this first
-drill down to COM+ applications/DCOM Config depending on the error source in eventviewer
-switch to a detail view,
-objects will show up in the right hand pane with an application ID against them.  *hopefully* the clsid above will show up there so you can identify the problem component.

Right clicking the object and going to properties you will see a "security" tab where you should be able to resolve permissions issues.
hope this helps,
if you need further assistance with fixing security, you'll need to advise what is currently setup on the problem component (and what the component is if possible).
0
 

Author Comment

by:jbreg
ID: 14004924
Source is DCOM indeed

Nice, got it. The program is ServiceKeeper (http://www.activeplus.com/us/products/skeeper) a great little utility that allows monitoring of windows services, and notifies you when they are not running and can attempt to restart, etc. Under "launch and activation permissions" it is set to customise and when I click has everyone has deny permissions for every function listed. Access permissions are set to default, config are custom with only system and admins having full access.

What do I change? Why is it barking?
0
 
LVL 14

Expert Comment

by:alimu
ID: 14005467
not sure for that one - the cleanest way to do it would be an uninstall/reinstall of the tool if that's a simple operation for you & you still have a copy of the software.  
Otherwise you could try doing something like copying the security config for a working windows util (eg: automatic windows update) - minimum config being admin and system full rights, users read.....  begs the question why it would have been setup with deny permissions on launch/activation in the first place tho'.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 14

Expert Comment

by:alimu
ID: 14015571
Hi jbreg - how'd you go with this?
0
 

Author Comment

by:jbreg
ID: 14016344
I have contacted the vendor directly--will post a response when I hear more.
0
 
LVL 14

Expert Comment

by:alimu
ID: 14016396
Haven't I answered your question (both of them) already?
0
 

Author Comment

by:jbreg
ID: 14050868
Yes, thanks--the manufacturer advised to change the security settings for launch and activation to default, fyi...
0
 
LVL 14

Expert Comment

by:alimu
ID: 14053321
thanks jbreg.
0
 

Expert Comment

by:JR1
ID: 14742785
Thanks to this Q and A, I have identified the source of my DCOM errors and have contacted the vendor regarding the property security so I can make the changes. To take this a step further, could these DCOM errors cause the server's networking functions to cease? This is the problem I've been having. Our first indication of a problem is that n/w printing ceases. But it goes beyond that. The clients can still see the server but the server can not see nor access the clients. A hard re-boot solves the problem but that is very inconvenient and problematic.
0
 
LVL 14

Expert Comment

by:alimu
ID: 14748174
It depends what the utility does to the server communications when it hangs/crashes.  I would probably ask this as a new question if you can't get any info out of the vendor about it.  
What I'd recommend until you can get it fixed is uninstalling the utility, setting the recovery options on each windows service so that they'll automatically restart on failure and finding another way to monitor it until this gets sorted out (maybe just perfmon alerting would do it?)
cheers,
alimu.
0
 

Expert Comment

by:JR1
ID: 14751235
Thank you alimu. I will try our suggestion(s) and see what results I get.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This video tutorial shows you the steps to go through to set up what I believe to be the best email app on the android platform to read Exchange mail.  Get the app on your phone: The first step is to make sure you have the Samsung Email app on your …
Stellar Phoenix SQL Database Repair software easily fixes the suspect mode issue of SQL Server database. It is a simple process to bring the database from suspect mode to normal mode. Check out the video and fix the SQL database suspect mode problem.

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question