asked on

Applying DCOM Security through GPO error

I'm trying to resolve some WMI issues we having going on. I need to set some of security permissions in DCOM and am trying to do this through GPO (from a server 08 R2 DC) for about 200 computers. I wet the group policy but when I try to run it all the machines I look at have the following error:
"The machine wide group policy Launch and Activation Limits security descriptor is invalid. The security descriptor is defined as an invalid Security Descriptor Definitions Language (SDDL) string. The requested action was therefore not performed. Please contact your administrator to get the security descriptor corrected in the Group Policy settings."

In the Security descriptor field in the GPO I'm seeing:
"O:BAG:BAD:(A;;CCDCLC;;;WD)(A;;CCDCLC"

What does that BAG:BAD mean? Is this where my problem is coming from?

SOLUTION

Venkat Suresh

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

adml_shake

ASKER

You were right, the error was 10024. But I'm trying to use this GPO to change the DCOM permissions on the XP machines, the instructions in the links (unless I'm misunderstanding) seem to want me to lay hands on the machine to do the changes manually. Is there any way around this?

ASKER CERTIFIED SOLUTION

compdigit44

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

LeeTutor

I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.

compdigit44

Shouldn't you at least divide up the points to those who tried to make suggestions??

adml_shake

ASKER

I'm sorry, I thought the points system was for those who gave the answer to resolve my problem. From now on though I will divide them up to anyone that either gave me part of the answer that helped me resolve the issue or gave it to me outright.