The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

Hi

I am getting these errors on about 5 of my web servers that have IIS with shared config enabled.

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
{05D1D5D8-18D1-4B83-85ED-A0F99D53C885}
 and APPID 
{AD65A69D-3831-40D7-9629-9B0B50A93843}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

This error repeats over and over. But the agent seems to work fine. Does this error create problems for the SCCM agent? I found this post outlining what I think is the solution. Is ther any other way to solve this or is this the only solution? Or is there something else wrong? The error messages are not the same..

February 15th, 2012 1:41pm

Hi

I am getting these errors on about 5 of my web servers that have IIS with shared config enabled.

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
{05D1D5D8-18D1-4B83-85ED-A0F99D53C885}
 and APPID 
{AD65A69D-3831-40D7-9629-9B0B50A93843}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

This error repeats over and over. But the agent seems to work fine. Does this error create problems for the SCCM agent? I found this post outlining what I think is the solution. Is ther any other way to solve this or is this the only solution? Or is there something else wrong? The error messages are not the same..

Most times it isn't an issue, try this on for size, some DCOM troubleshooting info

http://technet.microsoft.com/en-us/library/cc751272.aspx

HTH

Free Windows Admin Tool Kit Click here and download it now
February 20th, 2012 5:16pm

Hi

I am getting these errors on about 5 of my web servers that have IIS with shared config enabled.

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
{05D1D5D8-18D1-4B83-85ED-A0F99D53C885}
 and APPID 
{AD65A69D-3831-40D7-9629-9B0B50A93843}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

This error repeats over and over. But the agent seems to work fine. Does this error create problems for the SCCM agent? I found this post outlining what I think is the solution. Is ther any other way to solve this or is this the only solution? Or is there something else wrong? The error messages are not the same..

Most times it isn't an issue, try this on for size, some DCOM troubleshooting info

http://technet.microsoft.com/en-us/library/cc751272.aspx

HTH

February 20th, 2012 5:16pm



You might need to provide permission using the below instruction.


1. Click Start -> Run -> Type -> dcomcnfg, expand Component Services -> Computers -> My Computer -> DCOM Config.
2. Click View -> Detail -> Now you will get Application Name and Application ID in right side.
3. Scroll down and find the application ID {AD65A69D-3831-40D7-9629-9B0B50A93843} -> Right Click -> Properties and select the Security tab.
3. Click Customize under "Launch & Activation Permission" -> click Edit -> Add in the account NT AUTHORITY\SYSTEM and set local launch and local activation.
4. Restart the application Service linked to this Application ID or restart the server and monitor

_________________________
.
Ur's -> SithaYuvaraj

Free Windows Admin Tool Kit Click here and download it now
March 6th, 2012 5:30pm



You might need to provide permission using the below instruction.


1. Click Start -> Run -> Type -> dcomcnfg, expand Component Services -> Computers -> My Computer -> DCOM Config.
2. Click View -> Detail -> Now you will get Application Name and Application ID in right side.
3. Scroll down and find the application ID {AD65A69D-3831-40D7-9629-9B0B50A93843} -> Right Click -> Properties and select the Security tab.
3. Click Customize under "Launch & Activation Permission" -> click Edit -> Add in the account NT AUTHORITY\SYSTEM and set local launch and local activation.
4. Restart the application Service linked to this Application ID or restart the server and monitor

_________________________
.
Ur's -> SithaYuvaraj

March 6th, 2012 5:30pm

You might need to provide permission using the below instruction.


1. Click Start -> Run -> Type -> dcomcnfg, expand Component Services -> Computers -> My Computer -> DCOM Config.
2. Click View -> Detail -> Now you will get Application Name and Application ID in right side.
3. Scroll down and find the application ID {AD65A69D-3831-40D7-9629-9B0B50A93843} -> Right Click -> Properties and select the Security tab.
3. Click Customize under "Launch & Activation Permission" -> click Edit -> Add in the account NT AUTHORITY\SYSTEM and set local launch and local activation.
4. Restart the application Service linked to this Application ID or restart the server and monitor

The above one work for me. Thank you.

  • Proposed as answer by Sreeraj v v Wednesday, January 16, 2013 1:23 PM
  • Unproposed as answer by Sreeraj v v Wednesday, January 16, 2013 1:23 PM
Free Windows Admin Tool Kit Click here and download it now
July 26th, 2012 9:49am

You might need to provide permission using the below instruction.


1. Click Start -> Run -> Type -> dcomcnfg, expand Component Services -> Computers -> My Computer -> DCOM Config.
2. Click View -> Detail -> Now you will get Application Name and Application ID in right side.
3. Scroll down and find the application ID {AD65A69D-3831-40D7-9629-9B0B50A93843} -> Right Click -> Properties and select the Security tab.
3. Click Customize under "Launch & Activation Permission" -> click Edit -> Add in the account NT AUTHORITY\SYSTEM and set local launch and local activation.
4. Restart the application Service linked to this Application ID or restart the server and monitor

The above one work for me. Thank you.

  • Proposed as answer by Sreeraj v v Wednesday, January 16, 2013 1:23 PM
  • Unproposed as answer by Sreeraj v v Wednesday, January 16, 2013 1:23 PM
July 26th, 2012 9:49am

I'm getting these on my database server from SQL Server 2012, with user localhost.

Trouble is, the classID of the distributed com object listed in the windows event log doesn't appear in the list.

<rant>It is ridiculous to have to find the class ID manually when there are potentially hundreds of entries there.  Given the age of DCOM, one would think the developers could have implemented a FIND feature</rant>

  • Proposed as answer by lbvangeel Wednesday, December 03, 2014 11:55 PM
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2013 6:28pm

I'm getting these on my database server from SQL Server 2012, with user localhost.

Trouble is, the classID of the distributed com object listed in the windows event log doesn't appear in the list.

<rant>It is ridiculous to have to find the class ID manually when there are potentially hundreds of entries there.  Given the age of DCOM, one would think the developers could have implemented a FIND feature</rant>

  • Proposed as answer by lbvangeel Wednesday, December 03, 2014 11:55 PM
January 31st, 2013 6:28pm

@ MooseMiester, Ravi

Same problem with BLBEngine Class (it nor it's AppID are listed in DCOM component services).  This is the error that causes WBAdmin to fail every time.  Did you find any resolution?

Thanks

Sean

Free Windows Admin Tool Kit Click here and download it now
May 24th, 2013 11:30pm

I have the exact same issue going on with my servers as well.  Its listed in the error logs but no where to be found in the DCOM components.  So what do you do at this point? 
June 7th, 2013 6:58pm

We have a similar error on a print server and can't find the CLSID in DCOM components but I am able to find it in the registry.

{C97FCC79-E628-407D-AE68-A06AD6D8B4D1} is associated with IPBusEnum, However, when go back to DCOM components, I realize IPBusEnum has an AppID {344ED43D-D086-4961-86A6-1106F4ACAD9B}. So, don't be confused by CLSID and AppID.

By default, NT AUTHORITY\SYSTEM only has Local Activation permission. I add Local Launch on as instructed and hope it fixes the issue.

Thanks,

D

Free Windows Admin Tool Kit Click here and download it now
June 14th, 2013 2:19pm

I have a similar error on a db server  and can't find the CLSID in DCOM components but I am able to find it in the registry.

application-specific Local Activation {FDC3723D-1588-4BA3-92D4-42C430735D7D} {83B33982-693D-4824-B42E-7196AE61BB05} NT SERVICE SQLSERVERAGENT S-1-5-80-344959196-2060754871-2302487193-2804545603-1466107430 LocalHost (Using LRPC)


Thanks,

D


June 26th, 2013 9:36am

I have the same error on 3 different applications. The problem is I already changed permission and gave full control to the specified user.

I don't know what to do anymore!

By the way...should one change the registry key back to the default owner, or can I just leave it like it is after I changed ownership for the problem DCOM entry?

Free Windows Admin Tool Kit Click here and download it now
August 1st, 2013 9:39pm

Hi,

If you find the CLSID in the registry then the AppID is listed in the registry entry. You can then match up the relevant DCOM Application ID and set the permissions as you need.

I found this out after spending an age searching for the CLSID in the DCOM Config :(

Hope this helps.

James

August 5th, 2013 9:40am

Hey There can any one help me with my problem

Log Name:      System
Source:        Microsoft-Windows-DistributedCOM
Date:          30/09/2013 15:00:14
Event ID:      10016
Task Category: None
Level:         Error
Keywords:      Classic
User:          NETWORK SERVICE
Computer:     myServer
Description:  The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{61738644-F196-11D0-9953-00C04FD919C1}
 and APPID
{61738644-F196-11D0-9953-00C04FD919C1}
 to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

The problem I am having is that if I right click on the CLSID (IIS WARMREG admin Service) and selected the security tab all the entries in the window are not active???

Can somebody assist please!!

Free Windows Admin Tool Kit Click here and download it now
September 30th, 2013 7:03pm

I assume you mean the security options are greyed out?

If you are using Windows Server 2008 or below you should be able to edit the component services permissions as long as you are logged in as a member of the local administrators group.

This was changed in Windows Server 2008 R2 however so you will need to grant permissions for the local administrators group to the registry key.

The below article explains this process.

http://blogs.msdn.com/b/emeadaxsupport/archive/2010/01/26/unable-to-edit-the-dcom-settings-for-iis-wamreg-admin-service-on-a-windows-server-2008-r2-when-trying-to-configure-kerberos-authentication-for-role-centers.aspx

After granting this permission you should be good to go.

James

October 1st, 2013 8:14am

hello.

When I go to security tab all of the options are disabled. can't click on them or do something.

Free Windows Admin Tool Kit Click here and download it now
March 26th, 2015 3:34am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics