?
Solved

WMI errors

Posted on 2008-10-03
5
Medium Priority
?
3,816 Views
Last Modified: 2013-11-05
WMI errors are preventing me from loading SQL 2005 Express or SQL 2008 express.
 Several errors like those shown below-- DCOM security errors.
I tried following the instructions in WMIDIAG-- did not work.  Also eliminate the WBEM repository and had XP recreate it fresh-- these errors remained.
I don't see where Microsoft WBEM UnSecured Apartment appears in DCOM security-- don't see how to fix these

18139 23:24:48 (0) ** DCOM security for 'Microsoft WBEM UnSecured Apartment' (Launch & Activation Permissions): ........................... MODIFIED.
18140 23:24:48 (1) !! ERROR: Default trustee 'BUILTIN\ADMINISTRATORS' has been REMOVED!
18141 23:24:48 (0) **        - REMOVED ACE:
18142 23:24:48 (0) **          ACEType:  &h0
18143 23:24:48 (0) **                    ACCESS_ALLOWED_ACE_TYPE
18144 23:24:48 (0) **          ACEFlags: &h0
18145 23:24:48 (0) **          ACEMask:  &h1
18146 23:24:48 (0) **                    DCOM_RIGHT_EXECUTE
18147 23:24:48 (0) **
18148 23:24:48 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
18149 23:24:48 (0) **    Removing default security will cause some operations to fail!
18150 23:24:48 (0) **    It is possible to fix this issue by editing the security descriptor and adding the ACE.
18151 23:24:48 (0) **    For DCOM objects, this can be done with 'DCOMCNFG.EXE'.
18152 23:24:48 (0) **
18153 23:24:48 (0) ** DCOM security for 'Microsoft WBEM UnSecured Apartment' (Launch & Activation Permissions): ........................... MODIFIED.
18154 23:24:48 (1) !! ERROR: Default trustee 'NT AUTHORITY\INTERACTIVE' has been REMOVED!
18155 23:24:48 (0) **        - REMOVED ACE:
18156 23:24:48 (0) **          ACEType:  &h0
18157 23:24:48 (0) **                    ACCESS_ALLOWED_ACE_TYPE
18158 23:24:48 (0) **          ACEFlags: &h0
18159 23:24:48 (0) **          ACEMask:  &h1
18160 23:24:48 (0) **                    DCOM_RIGHT_EXECUTE
18161 23:24:48 (0) **
18162 23:24:48 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
18163 23:24:48 (0) **    Removing default security will cause some operations to fail!
18164 23:24:48 (0) **    It is possible to fix this issue by editing the security descriptor and adding the ACE.
18165 23:24:48 (0) **    For DCOM objects, this can be done with 'DCOMCNFG.EXE'.
18166 23:24:48 (0) **
18167 23:24:48 (0) ** DCOM security for 'Microsoft WBEM UnSecured Apartment' (Launch & Activation Permissions): ........................... MODIFIED.
18168 23:24:48 (1) !! ERROR: Default trustee 'NT AUTHORITY\SYSTEM' has been REMOVED!
18169 23:24:48 (0) **        - REMOVED ACE:
18170 23:24:48 (0) **          ACEType:  &h0
18171 23:24:48 (0) **                    ACCESS_ALLOWED_ACE_TYPE
18172 23:24:48 (0) **          ACEFlags: &h0
18173 23:24:48 (0) **          ACEMask:  &h1
18174 23:24:48 (0) **                    DCOM_RIGHT_EXECUTE
18175 23:24:48 (0) **
18176 23:24:48 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
18177 23:24:48 (0) **    Removing default security will cause some operations to fail!
18178 23:24:48 (0) **    It is possible to fix this issue by editing the security descriptor and adding the ACE.
18179 23:24:48 (0) **    For DCOM objects, this can be done with 'DCOMCNFG.EXE'.
0
Comment
Question by:dakota5
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 22

Expert Comment

by:orangutang
ID: 22642630
I'm not sure what that means but have you tried the WMI Diagnosis Utility (http://www.microsoft.com/downloads/details.aspx?familyid=d7ba3cd6-18d1-4d05-b11e-4c64192ae97d&displaylang=en)
0
 

Author Comment

by:dakota5
ID: 22644974
Orangutang:  Yes, the WMI diagnosis utility is the wmidiag I refer to in the original questions.  In the output from wmidiag there are suggestions for correcting the errors, but they are sketchy and difficult to follow.  (I posted part of the output in the original question.)

The point of my question is for someone to translate into clear operational English the steps suggested by wmidiag.  I ran DCOMCNFG as suggested, but have no idea how to use it to make these corrections.

Perhaps I will get a response from someone with experience using dcomcnfg.
0
 
LVL 16

Assisted Solution

by:cantoris
cantoris earned 400 total points
ID: 22646404
I've read that WMIDiag is not SP3-aware so perhaps the results it is giving you are misleading?
What does the Event Log itself show when you try your install?

Open DCOMCnFg again and navigate to
Component Services - Computers - My Computer - DCOM Config
Answer "Yes" to any prompts that appear.
You ought to be able to find "Microsoft WBEM UnSecured Apartment" listed alphabetically in there.  Is that where you looked?
Presuming you find it, open its Properties and try setting the options on the Security tab to "Use Default".

The following page has loads of stuff you can try if WMI is really poorly:
http://windowsxp.mvps.org/repairwmi.htm
0
 

Accepted Solution

by:
dakota5 earned 0 total points
ID: 22675407
Cantoris:
There is no entry for "Microsoft WBEM UnSecured Apartment" anywhere in the DCOM Config list.
I did find a solution to the problem, though.
http://www.windows-tech.info/15/91555fe5c8df4ee9.php
This was provided by Microsoft to the user who posted it.  Not clear why it works for allowing sqlExpress 2005 and 2008 to load.
The following is all from that posting--
1. Add network service account to administrators group.
2. Add authenticated users to following registry keys:

* HKCR\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}
* HKCR\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}
* HKLM\Software\Microsoft\WBEM\CIMOM                 I did not actually do this third registry fix

To do step 1, you go to Control Panel, User Accounts, Advanced tab, click Advanced button, and open Groups folder.

To do step 2, right click on those registry keys, click Permissions, and add Authenticated Users. I gave them Full Control permissions, but I'm not sure if that was necessary or not.

0
 
LVL 16

Expert Comment

by:cantoris
ID: 22676201
That was a very weird one!  Thanks for letting us know what fixed it.
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We have adopted the strategy to use Computers in Student Labs as the bulletin boards. The same target can be achieved by using a Login Notice feature in Group policy but it’s not as attractive as graphical wallpapers with message which grabs the att…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question