DCOM/Windows installer issue.

[WyldeCarde]

I have an issue where, after applying a windows security template I have written, windows installer will not run correctly. Unregistering and reregistering the service fixes the issue until the template is reapplied.

I searcheed on here, and found a thread similar but not the same:

http://tek-tips.com/viewthread.cfm?qid=1100112

I tried to follow the steps included, ran up dcomcnfg, expanded component services -> computers, but when I expand the computers section the utility crashes and i am left forlornly looking at my desktop.

There are a number of other issues including slow log in but I think they are a symptom of this issue.

The full details of the security template can be posted too, but its... large lol

 

[WyldeCarde]

In addition the COM+ event system service is just sitting saying starting... but not actually starting. I think this might be the main issue anyone got any ideas?

 

[wasisnt]

Try the Windows installer cleanup tool?

http://support.microsoft.com/default.aspx?kbid=290301

MCSE NT 4.0, A+ & Network +

Free Computer Help and Tips:

http://www.onlinecomputertips.com/

 

[linney]

Having crashes when you run the Dcomcnfg does that produce a dcomcnfg.log that might help you?

Actions such as search and drag and drop do not work because the default access permissions have been changed in the Dcomcnfg.exe tool

http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q274696#kb1

PC hangs for 3-7 min. just after signing on internet
thread779-1082303

DCOM Windows XP Do You Need It?

http://www.updatexp.com/dcom-windows-xp.html

How To Reset Security Settings Back to the Defaults

http://support.microsoft.com/default.aspx?scid=313222#1

Have you tried your Security Template on other machines to see if it causes problems on them too?

 

[WyldeCarde]

I certainly have tried it on other machines, with multiple different pieces of hardware, all with the same result.

I actually have a good dozen people testing it for me. Which is why I need to figure out what is causing it lol

 

[WyldeCarde]

Woops didnt mean to submit that!

I don't seem to have a dcomcnfg.log file generated, which is a little worrying

 

[linney]

To the uninitiated (me) it seems like the common denominator is the Security Template?

HOW TO: Use the Secedit.sdb Database to Perform a Security Analysis in Windows Server 2003

http://support.microsoft.com/kb/816119/

Client, service, and program incompatibilities that may occur when you modify security settings and user rights assignments

http://support.microsoft.com/kb/823659/en-us?FR=1&PA=1&SD=HSCH

Security configuration guidance support

http://support.microsoft.com/kb/885409/en-us?FR=1&PA=1&SD=HSCH

The Secedit.exe command-line utility does not export a security template for local security policy in Windows XP

http://support.microsoft.com/kb/889532/en-us?FR=1&PA=1&SD=HSCH

 

[WyldeCarde]

Yes I realise that it's the template causing the issue. I can fix the problem by backing it off of the system.

What I'm really after is which settings could cause this issue. I've looked through it myself, I thought initially it might be an NTFS permissions issue but after stripping all of that out the issue persists.

Im really after the cause, not the cure if you know what I mean, I know of several ways to fix the actual problem, but since this template has to be applied to 11000 client PCs I need to isolate the cause.

 

[linney]

Again I can only think about the logging when the Security Template is applied, are there any errors or comments in the logging? Otherwise I suppose it might be an awful case of cutting your Template in half (at a time) and sort of working by trial and error to isolate the problem in the Template itself.

 

[WyldeCarde]

yeah thats what im doing

Its damn dull and my attention span for this sort of thing aint great but never mind huh?