DCOM permissions issue in server 2008

Posted on 2011-05-04
Last Modified: 2012-05-11
I am running a task in the Task Scheduler that logs in as a domain user and runs a custom program to do things with Excel spreadsheets.  If I log in as that user normally, I can run the program just fine.  When run from the Task Scheduler, however, the program returns an OLE error "Access is Denied".  If I use an admin account in the Task Scheduler instead of the domain user, the program runs fine.  (That may end up being an acceptable workaround but I'm not sure yet.)

So, in short, there's some sort of permissions issue with the domain user trying to create an Excel.Application object when run as a batch job through the Task Scheduler.  

Looking through the Event Viewer, I find this entry:

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
 and APPID
 to the user DOMAIN\user SID (S-1-........) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

That CLSID does correspond to Excel.Application which is the object my program is trying to instantiate.

I've seen other threads referring to this Component Services administrative tool.  I'm unfamiliar with it, but I've looked through it and can't find anything referencing Excel or that CLSID anywhere in it.  

Question by:jn2112
    1 Comment

    Accepted Solution

    OK, I believe I've fixed my own problem.  I adjusted Launch and Activation Permissions at the My Computer level for the domain user in question, and the task scheduler ran perfectly.  

    I was looking for the specific application in the subfolders below but it wasn't in there.


    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Recently, I was asked to look into SCCM 2007 by my employer, having a degree of experience of earlier versions of SMS and some previous SCCM knowledge I didn't expect the procedure to involve to much time. I read a number of guides concerning it…
    Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now