Hi,I am running a WS08 Subordinate CA in a domain environment, and the event logs show this error: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {D99E6E73-FC88-11D0-B498-00A0C90312F3} to the user ADS\tom SID (S-1-5-21-3979957847-3141304955-1949522883-xxxxx) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool. (I have removed the last digits of the SID above for security reasons). That CLSID maps to the CertSRv Request object.When I open the Component Services mmc, and try to change the CertSrv Request object permissions, they're all greyed out.And I am running as an Enterprise, Domain and Local Admin.Look forward to your replies.Kind regards,Tom

Hi Tom, For security purpose, some system core components only grant Trustedinstaller full control permission instead of Administrators. To enable the ability of modifying settings of 'CertSrv Request': 1. Open Register Editor to 'HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{D99E6E74-FC88-11D0-B498-00A0C90312F3}' 2. Right click the {D99E6E74-FC88-11D0-B498-00A0C90312F3} key (AppID of Certsrv Request), choose permission. 3. Take the ownership to Administrators. Then grant the Administrators 'full control' permission. 4. Restart the dcomcnfg. Then you can grant the full control permission to your account. Hope it helps. Tim Quan - MSFT

Tim,Resolved, thank you for your time.Regards,Tom

You are welcome.

Was having the same issue with ShellWindows DCOM service. This solution was perfect...thanks so much.