Urgent!!! Large amount of DCOM 10020 errors in event log after server restore

My server 2003 had a disk problem and I performed a Disaster Restore. After
the restore, the DHCP database is corrupted and I had restored the backup
from the set again and it restored itself. However, there are now over 30+
DCOM 10020 errors in the event log everytime my server starts, and I cannot
access the event log remotely anymore.

Can anybody help please? I am quite desperate......

hi,
The machine wide Default Launch and Activation security descriptor is
invalid. It contains Access Control Entries with permissions that are
invalid. The requested action was therefore not performed. This security
permission can be corrected using the Component Services administrative tool.
To access Launch and Activation Permissions, run dcomcnfg -> Component
Services -> Computers -> Right Click My Computer -> Properties -> COM
Security tab.
--
Dragos CAMARA
MCSA Windows 2003 server


"mlai" wrote:

> My server 2003 had a disk problem and I performed a Disaster Restore. After
> the restore, the DHCP database is corrupted and I had restored the backup
> from the set again and it restored itself. However, there are now over 30+
> DCOM 10020 errors in the event log everytime my server starts, and I cannot
> access the event log remotely anymore.
>
> Can anybody help please? I am quite desperate......
>

Thanks. I can see that message from the event itself. However, what do I
change those permissions to?

"Dragos CAMARA" wrote:

> hi,
> The machine wide Default Launch and Activation security descriptor is
> invalid. It contains Access Control Entries with permissions that are
> invalid. The requested action was therefore not performed. This security
> permission can be corrected using the Component Services administrative tool.
> To access Launch and Activation Permissions, run dcomcnfg -> Component
> Services -> Computers -> Right Click My Computer -> Properties -> COM
> Security tab.
> --
> Dragos CAMARA
> MCSA Windows 2003 server
>
>
> "mlai" wrote:
>
> > My server 2003 had a disk problem and I performed a Disaster Restore. After
> > the restore, the DHCP database is corrupted and I had restored the backup
> > from the set again and it restored itself. However, there are now over 30+
> > DCOM 10020 errors in the event log everytime my server starts, and I cannot
> > access the event log remotely anymore.
> >
> > Can anybody help please? I am quite desperate......
> >

try to readd(delete+add) each user/group wich is present there.
--
Dragos CAMARA
MCSA Windows 2003 server


"mlai" wrote:

> Thanks. I can see that message from the event itself. However, what do I
> change those permissions to?
>
> "Dragos CAMARA" wrote:
>
> > hi,
> > The machine wide Default Launch and Activation security descriptor is
> > invalid. It contains Access Control Entries with permissions that are
> > invalid. The requested action was therefore not performed. This security
> > permission can be corrected using the Component Services administrative tool.
> > To access Launch and Activation Permissions, run dcomcnfg -> Component
> > Services -> Computers -> Right Click My Computer -> Properties -> COM
> > Security tab.
> > --
> > Dragos CAMARA
> > MCSA Windows 2003 server
> >
> >
> > "mlai" wrote:
> >
> > > My server 2003 had a disk problem and I performed a Disaster Restore. After
> > > the restore, the DHCP database is corrupted and I had restored the backup
> > > from the set again and it restored itself. However, there are now over 30+
> > > DCOM 10020 errors in the event log everytime my server starts, and I cannot
> > > access the event log remotely anymore.
> > >
> > > Can anybody help please? I am quite desperate......
> > >

OK. Just did that and restarted. I just hopes the server comes back
up.......
"Dragos CAMARA" <dragos_c@remove-this.hotmail.com> wrote in message
news:45BA89A0-DBF0-4614-A2A8-438017ADA1FC@microsoft.com...
> try to readd(delete+add) each user/group wich is present there.
> --
> Dragos CAMARA
> MCSA Windows 2003 server
>
>
> "mlai" wrote:
>
>> Thanks. I can see that message from the event itself. However, what do
>> I
>> change those permissions to?
>>
>> "Dragos CAMARA" wrote:
>>
>> > hi,
>> > The machine wide Default Launch and Activation security descriptor is
>> > invalid. It contains Access Control Entries with permissions that are
>> > invalid. The requested action was therefore not performed. This
>> > security
>> > permission can be corrected using the Component Services administrative
>> > tool.
>> > To access Launch and Activation Permissions, run dcomcnfg -> Component
>> > Services -> Computers -> Right Click My Computer -> Properties -> COM
>> > Security tab.
>> > --
>> > Dragos CAMARA
>> > MCSA Windows 2003 server
>> >
>> >
>> > "mlai" wrote:
>> >
>> > > My server 2003 had a disk problem and I performed a Disaster Restore.
>> > > After
>> > > the restore, the DHCP database is corrupted and I had restored the
>> > > backup
>> > > from the set again and it restored itself. However, there are now
>> > > over 30+
>> > > DCOM 10020 errors in the event log everytime my server starts, and I
>> > > cannot
>> > > access the event log remotely anymore.
>> > >
>> > > Can anybody help please? I am quite desperate......
>> > >

OK. No more 10020 errors after start. But I don't know if the events are
fixed or just being suppressed because in the event log, DCOM inserts an
event saying that duplicate events are suppressed for 86400 secs.........
"mlai" <mlai@community.nospam> wrote in message
news:BF4C4868-C340-4346-9B08-88AC0561C065@microsoft.com...
> OK. Just did that and restarted. I just hopes the server comes back
> up.......
> "Dragos CAMARA" <dragos_c@remove-this.hotmail.com> wrote in message
> news:45BA89A0-DBF0-4614-A2A8-438017ADA1FC@microsoft.com...
>> try to readd(delete+add) each user/group wich is present there.
>> --
>> Dragos CAMARA
>> MCSA Windows 2003 server
>>
>>
>> "mlai" wrote:
>>
>>> Thanks. I can see that message from the event itself. However, what do
>>> I
>>> change those permissions to?
>>>
>>> "Dragos CAMARA" wrote:
>>>
>>> > hi,
>>> > The machine wide Default Launch and Activation security descriptor is
>>> > invalid. It contains Access Control Entries with permissions that are
>>> > invalid. The requested action was therefore not performed. This
>>> > security
>>> > permission can be corrected using the Component Services
>>> > administrative tool.
>>> > To access Launch and Activation Permissions, run dcomcnfg -> Component
>>> > Services -> Computers -> Right Click My Computer -> Properties -> COM
>>> > Security tab.
>>> > --
>>> > Dragos CAMARA
>>> > MCSA Windows 2003 server
>>> >
>>> >
>>> > "mlai" wrote:
>>> >
>>> > > My server 2003 had a disk problem and I performed a Disaster
>>> > > Restore. After
>>> > > the restore, the DHCP database is corrupted and I had restored the
>>> > > backup
>>> > > from the set again and it restored itself. However, there are now
>>> > > over 30+
>>> > > DCOM 10020 errors in the event log everytime my server starts, and I
>>> > > cannot
>>> > > access the event log remotely anymore.
>>> > >
>>> > > Can anybody help please? I am quite desperate......
>>> > >
>

And the the Event log not accessible remotely as due to remote registry
service being disabled. I have no idea why. The server is behind a
firewall and has very agressive Anti-virus solutions. So does all
workstations on the network. Just baffles me........


"mlai" <mlai@community.nospam> wrote in message
news:448AA598-F63C-4766-AF32-A62118A816F4@microsoft.com...
> OK. No more 10020 errors after start. But I don't know if the events are
> fixed or just being suppressed because in the event log, DCOM inserts an
> event saying that duplicate events are suppressed for 86400 secs.........
> "mlai" <mlai@community.nospam> wrote in message
> news:BF4C4868-C340-4346-9B08-88AC0561C065@microsoft.com...
>> OK. Just did that and restarted. I just hopes the server comes back
>> up.......
>> "Dragos CAMARA" <dragos_c@remove-this.hotmail.com> wrote in message
>> news:45BA89A0-DBF0-4614-A2A8-438017ADA1FC@microsoft.com...
>>> try to readd(delete+add) each user/group wich is present there.
>>> --
>>> Dragos CAMARA
>>> MCSA Windows 2003 server
>>>
>>>
>>> "mlai" wrote:
>>>
>>>> Thanks. I can see that message from the event itself. However, what
>>>> do I
>>>> change those permissions to?
>>>>
>>>> "Dragos CAMARA" wrote:
>>>>
>>>> > hi,
>>>> > The machine wide Default Launch and Activation security descriptor is
>>>> > invalid. It contains Access Control Entries with permissions that are
>>>> > invalid. The requested action was therefore not performed. This
>>>> > security
>>>> > permission can be corrected using the Component Services
>>>> > administrative tool.
>>>> > To access Launch and Activation Permissions, run dcomcnfg ->
>>>> > Component
>>>> > Services -> Computers -> Right Click My Computer -> Properties -> COM
>>>> > Security tab.
>>>> > --
>>>> > Dragos CAMARA
>>>> > MCSA Windows 2003 server
>>>> >
>>>> >
>>>> > "mlai" wrote:
>>>> >
>>>> > > My server 2003 had a disk problem and I performed a Disaster
>>>> > > Restore. After
>>>> > > the restore, the DHCP database is corrupted and I had restored the
>>>> > > backup
>>>> > > from the set again and it restored itself. However, there are now
>>>> > > over 30+
>>>> > > DCOM 10020 errors in the event log everytime my server starts, and
>>>> > > I cannot
>>>> > > access the event log remotely anymore.
>>>> > >
>>>> > > Can anybody help please? I am quite desperate......
>>>> > >
>>
>

Hello,

Thank you for using newsgroup!

From your post, I am glad to hear that the event error has not been
occurred on the server. Thanks for Dragos CAMARA's great help.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.




--------------------
| From: "mlai" <mlai@community.nospam>
| References: <1C0668B9-E9B0-40CA-BE62-00574A0E4412@microsoft.com>
<B2DFD617-7492-42C9-8DD5-5C8B539F3683@microsoft.com>
<A78280AC-FE33-45B4-8C15-958AE60D48B8@microsoft.com>
<45BA89A0-DBF0-4614-A2A8-438017ADA1FC@microsoft.com>
<BF4C4868-C340-4346-9B08-88AC0561C065@microsoft.com>
<448AA598-F63C-4766-AF32-A62118A816F4@microsoft.com>
| Subject: Re: Urgent!!! Large amount of DCOM 10020 errors in event log
afte
| Date: Tue, 27 Feb 2007 11:16:06 +0800
| Lines: 65
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
| X-RFC2646: Format=Flowed; Response
| Message-ID: <ODr1f2hWHHA.4404@TK2MSFTNGP03.phx.gbl>
| Newsgroups: microsoft.public.windows.server.general
| NNTP-Posting-Host: 210.176.29.137
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:6741
| X-Tomcat-NG: microsoft.public.windows.server.general
|
| And the the Event log not accessible remotely as due to remote registry
| service being disabled. I have no idea why. The server is behind a
| firewall and has very agressive Anti-virus solutions. So does all
| workstations on the network. Just baffles me........
|
|
| "mlai" <mlai@community.nospam> wrote in message
| news:448AA598-F63C-4766-AF32-A62118A816F4@microsoft.com...
| > OK. No more 10020 errors after start. But I don't know if the events
are
| > fixed or just being suppressed because in the event log, DCOM inserts
an
| > event saying that duplicate events are suppressed for 86400
secs.........
| > "mlai" <mlai@community.nospam> wrote in message
| > news:BF4C4868-C340-4346-9B08-88AC0561C065@microsoft.com...
| >> OK. Just did that and restarted. I just hopes the server comes back
| >> up.......
| >> "Dragos CAMARA" <dragos_c@remove-this.hotmail.com> wrote in message
| >> news:45BA89A0-DBF0-4614-A2A8-438017ADA1FC@microsoft.com...
| >>> try to readd(delete+add) each user/group wich is present there.
| >>> --
| >>> Dragos CAMARA
| >>> MCSA Windows 2003 server
| >>>
| >>>
| >>> "mlai" wrote:
| >>>
| >>>> Thanks. I can see that message from the event itself. However,
what
| >>>> do I
| >>>> change those permissions to?
| >>>>
| >>>> "Dragos CAMARA" wrote:
| >>>>
| >>>> > hi,
| >>>> > The machine wide Default Launch and Activation security descriptor
is
| >>>> > invalid. It contains Access Control Entries with permissions that
are
| >>>> > invalid. The requested action was therefore not performed. This
| >>>> > security
| >>>> > permission can be corrected using the Component Services
| >>>> > administrative tool.
| >>>> > To access Launch and Activation Permissions, run dcomcnfg ->
| >>>> > Component
| >>>> > Services -> Computers -> Right Click My Computer -> Properties ->
COM
| >>>> > Security tab.
| >>>> > --
| >>>> > Dragos CAMARA
| >>>> > MCSA Windows 2003 server
| >>>> >
| >>>> >
| >>>> > "mlai" wrote:
| >>>> >
| >>>> > > My server 2003 had a disk problem and I performed a Disaster
| >>>> > > Restore. After
| >>>> > > the restore, the DHCP database is corrupted and I had restored
the
| >>>> > > backup
| >>>> > > from the set again and it restored itself. However, there are
now
| >>>> > > over 30+
| >>>> > > DCOM 10020 errors in the event log everytime my server starts,
and
| >>>> > > I cannot
| >>>> > > access the event log remotely anymore.
| >>>> > >
| >>>> > > Can anybody help please? I am quite desperate......
| >>>> > >
| >>
| >
|
|
|