Access denied attempting to launch a DCOM Server

[DarraghFitzpatrick]

Running a Windows 2000 SP4 server with Terminal Services and Citrix Metaframe XP installed. Each time a remote user logs into the server the following event is logged in the windows 2000 system event log

Event 10002 : Access denied attempting to launch a DCOM Server. The server is: 00020906-0000-0000-C000-000000000046}
The user is Unavailable/Unavailable, SID=Unavailable.

does anybody know why this is logged ?

Darragh

 

[GlenJohnson]

According to MS, it's no big deal.
DCOM

Glen A. Johnson
If you're from Northern Illinois/Southern Wisconsin feel free to join the Tek-Tips in Chicago, Illinois Forum.

TTinChicago
Johnson Computers

 

[lessy2]

here's the info from

http://support.microsoft.com/default.aspx?scid=kb;en-us;290398

(Microsoft Knowledgebase)
PRB: Access Denied When You Try to Start DCOM Server
View products that this article applies to.
This article was previously published under Q290398
SYMPTOMS
One of the following events appear in the System log on a server that is running Internet Information Server (IIS):

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10002
Date: 2/22/2001
Time: 2:11:52 PM
User: <ComputerName>\IWAM_<ComputerName>
Computer: <ComputerName>
Description: Access denied attempting to launch a DCOM Server. The server is: {0C0A3666-30C9-11D0-8F20-00805F2CD064} The user is IWAM_<ComputerName>/<ComputerName>
-or-



Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10003
Date: 2/22/2001
Time: 2:56:32 PM
User: <ComputerName>\IWAM_<ComputerName>
Computer: <ComputerName>
Description: Access denied attempting to launch a DCOM Server using DefaultLaunchPermssion. The server is: {0C0A3666-30C9-11D0-8F20-00805F2CD064} The user is IWAM_<ComputerName>/<ComputerName>
CAUSE
The Distributed Component Object Model (DCOM) server that is failing to launch is Machine Debug Manager (0C0A3666-30C9-11D0-8F20-00805F2CD064). This occurs because Machine Debug Manager lacks sufficient DCOM permissions.

By default, Machine Debug Manager is not set up to use custom DCOM permissions; thus, it uses the default, computer-level DCOM permissions. For security reasons, the default DCOM permissions are tight. Blank access permissions mean that only the system and the identity of the client that is same as the server can access DCOM server. If the client's identity differs from the server's, the client receives the "Access denied" error.
RESOLUTION
To resolve this problem, follow these steps:
At a command prompt, type the following command to open Distributed COM Configuration Properties:
dcomcnfg.exe

On the Applications tab, in the list of DCOM servers, browse to the Machine Debug Manager entry. If this entry does not exist, type the following command at a command prompt to add the entry:
mdm.exe /regserver

Re-open Distributed COM Configuration Properties, click Machine Debug Manager, and then click Properties.
On the Security tab, click Use custom access permissions, and then click Edit.
Add the appropriate users to the access permissions for Machine Debug Manager. Microsoft recommends that you allow access permissions for at least the following users:
Interactive
System
Administrators
IWAM_<ComputerName>

Click OK twice to return to the Security tab.
On the Security tab, click Use custom launch permissions, and then click Edit.
Add the appropriate users to the launch permissions for Machine Debug Manager. Microsoft recommends that you allow launch permissions for at least the following users:
Interactive
System
Administrators
IWAM_<ComputerName>

Click OK twice to return to the Security tab.
On the Identity tab, click The interactive user to set the user account identity of Machine Debug Manager. If no one will be logged onto the computer, click This user, and then type the user name and password of a user in the Administrators group.
Close all instances of Mdm.exe, or restart your computer, so that these changes take effect.