Saturday, January 31, 2009

DCOM Error 10016 on SBS 2008

We've found SBS 2008 servers report this error as soon as clients begin accessing CompanyWeb:

DCOM    10016    MM/DD/YYYY HH:MM:SS AM 24
Event Details:   
The application-specific permission settings do not grant Local Activation
permission for the COM Server application with CLSID
{61738644-F196-11D0-9953-00C04FD919C1} to the user NT AUTHORITY\NETWORK SERVICE
SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission
can be modified using the Component Services administrative tool.

Our friends at MS PSS provided the fix:

This event can occur if DCOM permission settings are not correct for the application.

CLSID {61738644-F196-11D0-9953-00C04FD919C1} refers to the IIS WAMREG admin Service. To prevent this event, grant Local Activation permission
to NT AUTHORITY\NETWORK SERVICE account as follows:

  • In Administrative tools, open Component Services and expand Component Services, Computers, My Computer, DCOM Config
  • Look for the IIS WAMREG Admin Service
  • Right click and select Properties and then select the Security tab
  • Click Edit under Launch and Activation Permissions
  • Add the Network Service user
  • Add Local Activation rights
  • Click OK twice
  • Close Component Services

You may need to restart the server to have this take effect.

No comments: