Strange DCOM error 1

[AceHigh1234]

I get a DCOM error 10003 about twice a day, around 11 and again around 4. The error message is below.

Any ideas? My research has shown up a few things, but nothing where the user & SID are unavailable.

Access denied attempting to launch a DCOM Server using DefaultLaunchPermssion. The server is:
{00020906-0000-0000-C000-000000000046}
The user is Unavailable/Unavailable, SID=Unavailable.

 

[AceHigh1234]

ANybody ever seen this? Come on now, I need a hand, this is driving me fruit!

 

[AceHigh1234]

One More time to the top of the list..

PLEASE!

 

[tfg13]

Okay, since you are in the logs, what does the security log state at the times you get these errors? What are the DefaultLaunchPermissions set at?

 

[Seaspray0]

Do you have a windows RAS server running on NT?

Start, Help. You'll be surprised what's there. A+/MCP/MCSE/MCDBA

 

[lb63640]

Could copy/paste the entire error lsting?

 

[AceHigh1234]

No, seaspray, win2k and 2k advanced only, and no RAS server.
There are no events in the security log, tfg, and I don't know where to check the DefaultLaunchPermissions.

here comes the entire error log.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10003
Date: 4/11/2006
Time: 1:49:43 PM
User: N/A
Computer: ASERVER
Description:
Access denied attempting to launch a DCOM Server using DefaultLaunchPermssion. The server is:
{00020906-0000-0000-C000-000000000046}
The user is Unavailable/Unavailable, SID=Unavailable.


Thanks for your help

 

[tfg13]

To check the DefaultLaunchPermissions:

http://www.active-undelete.com/dcom-configuration.htm

This should get you a head start. You'll need to go to HKEY_CLASSES_ROOT\AppID\{00020906-0000-0000-C000-000000000046} to find out what the application is that is causing this error (On my machine, this number is for Microsoft Word). You can then use dcomcnfg to adjust the DefaultLaunchPermissions of the server.

Clear as mud?

 

[AceHigh1234]

I'll try it straight away here, tfg13

 

[AceHigh1234]

It was a Word document on my machine as well. I just don't know how to tell who was trying to launch it. I just noticed this error since I set up a terminal server, and all of the terminal server users are members of group TSUSERS, I added TSUSERS to allow launch of the default launch permissions.

 

[tfg13]

It should have logged the user ID, but it looks like it had an issue figuring out who the user is/was, possibly due to it being a TS user (just stabbing in the dark here).

 

[AceHigh1234]

Hope that's all it is.. The DCOM error seems to be gone for the time being.. Only to be replaced by other, equally puzzling error messages...but that's definately another post

 

[AceHigh1234]

OK... Still getting the same DCOM error.

Last time I got it was 4/16 at 11:30am
checked the logs this morning, had another error at 7:30 last night. This is driving me nuts! doesn't seem to be causing any problems, but I'm not sure how it's effecting my network and I just hate those red X's I'm not fond of the yellow !'s but I can deal with them..

 

[AceHigh1234]

Still getting the error, this is driving me fruit. Any new thoughts?

 

[itsp1965]

Check the comments listed on the EVENTID.NET website regarding this. It might help

http://www.eventid.net/display.asp?eventid=10003&eventno=872&source=DCOM&phase=1

 

[AceHigh1234]

That was the first place I went. The missing user and SID seems to be the main problem, and IO cant find refrence to that anywhere