Solved

DCOM Event viewer errors, please help :)

Posted on 2008-06-11
5
864 Views
Last Modified: 2011-06-03
I keep getting these errors can some please help rid my event viewer of these.

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{000C101C-0000-0000-C000-000000000046}
 to the user DYFLIN-EXCHANGE\IUSR_DYFLIN-EXCHANGE SID (S-1-5-21-1723704571-2642521685-794025816-1003).  This security permission can be modified using the Component Services administrative tool.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
Comment
Question by:nostrasystems
  • 3
  • 2
5 Comments
 
LVL 8

Accepted Solution

by:
greesh_hem earned 500 total points
ID: 21759648
This problem may occur if either of the following conditions is true: . A
program with the class ID (CLSID) that appears in the message tries to start
the COM component by using the DCOM infrastructure. However, the user does
not have the required permissions to start the COM component.
.. The Network Service account does not have the correct permissions.

To fix the issue:
To resolve this problem, use one of the following methods, depending on the
cause of the problem.
Back to the top

Grant the user permissions to start the COM component
Grant the user permissions to start the COM component. To do this, follow
these steps: 1. Click Start, click Run, type regedit in the Open box, and
then click OK.
2. Locate and then click the following registry subkey:
HKEY_CLASSES_ROOT\CLSID\CLSID value
Note In this subkey, "CLSID value" is a placeholder for the CLSID
information that appears in the message.
3. In the right pane, double-click AppID.

The Edit String dialog box appears. Leave this dialog box open and continue
to the next step.
4. Click Start, click Run, type dcomcnfg in the Open box, and then click OK.

If a Windows Security Alert message prompts you to keep blocking the
Microsoft Management Console program, click to unblock the program.
5. In Component Services, double-click Component Services, double-click
Computers, double-click My Computer, and then click DCOM Config.
6. In the details pane, locate the program by using the friendly name.

If the AppGUID identifier is listed instead of the friendly name, locate the
program by using this identifier.
7. Right-click the program, and then click Properties.
8. Click the Security tab.
9. In the Launch and Activation Permissions area, click Customize, and then
click Edit.
10. Click Add, type the user's account name, and then click OK.
11. While the user is selected, click to select the Allow check boxes for
the following items: . Local Launch
.. Remote Launch
.. Local Activation
.. Remote Activation

12. Click OK two times.
13. Quit Registry Editor.

Back to the top

Grant the correct permissions to the Network Service account
To grant the correct permissions to the Network Service account, follow
these steps: 1. Click Start, click Run, type dcomcnfg in the Open box, and
then click OK.
2. In Component Services, double-click Component Services, and then
double-click Computers.
3. Right-click My Computer, and then click Properties.
4. Click the COM Security tab.
5. In the Launch and Activation Permissions area, click Edit Default.
6. Click Add, type Network Service, and then click OK.
7. While Network Service is selected, click to select the Allow check boxes
for the following items: . Local Launch
.. Remote Launch
.. Local Activation
.. Remote Activation
Click OK two times.
0
 

Author Comment

by:nostrasystems
ID: 21760016
I have followed this and can see the object but what permissions do i need to set as it looks to have similar permissions the service it launches is called "msi server"
0
 
LVL 8

Expert Comment

by:greesh_hem
ID: 21769726
0
 

Author Comment

by:nostrasystems
ID: 21924128
what user account name do i use?

9. In the Launch and Activation Permissions area, click Customize, and then
click Edit.
10. Click Add, type the user's account name, and then click OK.
11. While the user is selected, click to select the Allow check boxes for
the following items: . Local Launch
.. Remote Launch
.. Local Activation
.. Remote Activation
0
 

Author Comment

by:nostrasystems
ID: 21924156
stupid question :) got it sorted :)
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question