Urgent!!! Large amount of DCOM 10020 errors in event log after server restore

[mlai]

My server 2003 had a disk problem and I performed a Disaster Restore. After
the restore, the DHCP database is corrupted and I had restored the backup
from the set again and it restored itself. However, there are now over 30+
DCOM 10020 errors in the event log everytime my server starts, and I cannot
access the event log remotely anymore.

Can anybody help please? I am quite desperate......

[Dragos CAMARA]

hi,
The machine wide Default Launch and Activation security descriptor is
invalid. It contains Access Control Entries with permissions that are
invalid. The requested action was therefore not performed. This security
permission can be corrected using the Component Services administrative tool.
To access Launch and Activation Permissions, run dcomcnfg -> Component
Services -> Computers -> Right Click My Computer -> Properties -> COM
Security tab.
--
Dragos CAMARA
MCSA Windows 2003 server


"mlai" wrote:

> My server 2003 had a disk problem and I performed a Disaster Restore. After
> the restore, the DHCP database is corrupted and I had restored the backup
> from the set again and it restored itself. However, there are now over 30+
> DCOM 10020 errors in the event log everytime my server starts, and I cannot
> access the event log remotely anymore.
>
> Can anybody help please? I am quite desperate......
>

[mlai]

Thanks. I can see that message from the event itself. However, what do I
change those permissions to?

"Dragos CAMARA" wrote:

> hi,
> The machine wide Default Launch and Activation security descriptor is
> invalid. It contains Access Control Entries with permissions that are
> invalid. The requested action was therefore not performed. This security
> permission can be corrected using the Component Services administrative tool.
> To access Launch and Activation Permissions, run dcomcnfg -> Component
> Services -> Computers -> Right Click My Computer -> Properties -> COM
> Security tab.
> --
> Dragos CAMARA
> MCSA Windows 2003 server
>
>
> "mlai" wrote:
>
> > My server 2003 had a disk problem and I performed a Disaster Restore. After
> > the restore, the DHCP database is corrupted and I had restored the backup
> > from the set again and it restored itself. However, there are now over 30+
> > DCOM 10020 errors in the event log everytime my server starts, and I cannot
> > access the event log remotely anymore.
> >
> > Can anybody help please? I am quite desperate......
> >

[Dragos CAMARA]

try to readd(delete+add) each user/group wich is present there.
--
Dragos CAMARA
MCSA Windows 2003 server


"mlai" wrote:

> Thanks. I can see that message from the event itself. However, what do I
> change those permissions to?
>
> "Dragos CAMARA" wrote:
>
> > hi,
> > The machine wide Default Launch and Activation security descriptor is
> > invalid. It contains Access Control Entries with permissions that are
> > invalid. The requested action was therefore not performed. This security
> > permission can be corrected using the Component Services administrative tool.
> > To access Launch and Activation Permissions, run dcomcnfg -> Component
> > Services -> Computers -> Right Click My Computer -> Properties -> COM
> > Security tab.
> > --
> > Dragos CAMARA
> > MCSA Windows 2003 server
> >
> >
> > "mlai" wrote:
> >
> > > My server 2003 had a disk problem and I performed a Disaster Restore. After
> > > the restore, the DHCP database is corrupted and I had restored the backup
> > > from the set again and it restored itself. However, there are now over 30+
> > > DCOM 10020 errors in the event log everytime my server starts, and I cannot
> > > access the event log remotely anymore.
> > >
> > > Can anybody help please? I am quite desperate......
> > >

[mlai]

OK. Just did that and restarted. I just hopes the server comes back
up.......
"Dragos CAMARA" <[email protected]> wrote in message
news:[email protected]...
> try to readd(delete+add) each user/group wich is present there.
> --
> Dragos CAMARA
> MCSA Windows 2003 server
>
>
> "mlai" wrote:
>
>> Thanks. I can see that message from the event itself. However, what do
>> I
>> change those permissions to?
>>
>> "Dragos CAMARA" wrote:
>>
>> > hi,
>> > The machine wide Default Launch and Activation security descriptor is
>> > invalid. It contains Access Control Entries with permissions that are
>> > invalid. The requested action was therefore not performed. This
>> > security
>> > permission can be corrected using the Component Services administrative
>> > tool.
>> > To access Launch and Activation Permissions, run dcomcnfg -> Component
>> > Services -> Computers -> Right Click My Computer -> Properties -> COM
>> > Security tab.
>> > --
>> > Dragos CAMARA
>> > MCSA Windows 2003 server
>> >
>> >
>> > "mlai" wrote:
>> >
>> > > My server 2003 had a disk problem and I performed a Disaster Restore.
>> > > After
>> > > the restore, the DHCP database is corrupted and I had restored the
>> > > backup
>> > > from the set again and it restored itself. However, there are now
>> > > over 30+
>> > > DCOM 10020 errors in the event log everytime my server starts, and I
>> > > cannot
>> > > access the event log remotely anymore.
>> > >
>> > > Can anybody help please? I am quite desperate......
>> > >

[mlai]

OK. No more 10020 errors after start. But I don't know if the events are
fixed or just being suppressed because in the event log, DCOM inserts an
event saying that duplicate events are suppressed for 86400 secs.........
"mlai" <[email protected]> wrote in message
news:[email protected]...
> OK. Just did that and restarted. I just hopes the server comes back
> up.......
> "Dragos CAMARA" <[email protected]> wrote in message
> news:[email protected]...
>> try to readd(delete+add) each user/group wich is present there.
>> --
>> Dragos CAMARA
>> MCSA Windows 2003 server
>>
>>
>> "mlai" wrote:
>>
>>> Thanks. I can see that message from the event itself. However, what do
>>> I
>>> change those permissions to?
>>>
>>> "Dragos CAMARA" wrote:
>>>
>>> > hi,
>>> > The machine wide Default Launch and Activation security descriptor is
>>> > invalid. It contains Access Control Entries with permissions that are
>>> > invalid. The requested action was therefore not performed. This
>>> > security
>>> > permission can be corrected using the Component Services
>>> > administrative tool.
>>> > To access Launch and Activation Permissions, run dcomcnfg -> Component
>>> > Services -> Computers -> Right Click My Computer -> Properties -> COM
>>> > Security tab.
>>> > --
>>> > Dragos CAMARA
>>> > MCSA Windows 2003 server
>>> >
>>> >
>>> > "mlai" wrote:
>>> >
>>> > > My server 2003 had a disk problem and I performed a Disaster
>>> > > Restore. After
>>> > > the restore, the DHCP database is corrupted and I had restored the
>>> > > backup
>>> > > from the set again and it restored itself. However, there are now
>>> > > over 30+
>>> > > DCOM 10020 errors in the event log everytime my server starts, and I
>>> > > cannot
>>> > > access the event log remotely anymore.
>>> > >
>>> > > Can anybody help please? I am quite desperate......
>>> > >
>

[mlai]

And the the Event log not accessible remotely as due to remote registry
service being disabled. I have no idea why. The server is behind a
firewall and has very agressive Anti-virus solutions. So does all
workstations on the network. Just baffles me........


"mlai" <[email protected]> wrote in message
news:[email protected]...
> OK. No more 10020 errors after start. But I don't know if the events are
> fixed or just being suppressed because in the event log, DCOM inserts an
> event saying that duplicate events are suppressed for 86400 secs.........
> "mlai" <[email protected]> wrote in message
> news:[email protected]...
>> OK. Just did that and restarted. I just hopes the server comes back
>> up.......
>> "Dragos CAMARA" <[email protected]> wrote in message
>> news:[email protected]...
>>> try to readd(delete+add) each user/group wich is present there.
>>> --
>>> Dragos CAMARA
>>> MCSA Windows 2003 server
>>>
>>>
>>> "mlai" wrote:
>>>
>>>> Thanks. I can see that message from the event itself. However, what
>>>> do I
>>>> change those permissions to?
>>>>
>>>> "Dragos CAMARA" wrote:
>>>>
>>>> > hi,
>>>> > The machine wide Default Launch and Activation security descriptor is
>>>> > invalid. It contains Access Control Entries with permissions that are
>>>> > invalid. The requested action was therefore not performed. This
>>>> > security
>>>> > permission can be corrected using the Component Services
>>>> > administrative tool.
>>>> > To access Launch and Activation Permissions, run dcomcnfg ->
>>>> > Component
>>>> > Services -> Computers -> Right Click My Computer -> Properties -> COM
>>>> > Security tab.
>>>> > --
>>>> > Dragos CAMARA
>>>> > MCSA Windows 2003 server
>>>> >
>>>> >
>>>> > "mlai" wrote:
>>>> >
>>>> > > My server 2003 had a disk problem and I performed a Disaster
>>>> > > Restore. After
>>>> > > the restore, the DHCP database is corrupted and I had restored the
>>>> > > backup
>>>> > > from the set again and it restored itself. However, there are now
>>>> > > over 30+
>>>> > > DCOM 10020 errors in the event log everytime my server starts, and
>>>> > > I cannot
>>>> > > access the event log remotely anymore.
>>>> > >
>>>> > > Can anybody help please? I am quite desperate......
>>>> > >
>>
>

[Ken Zhao [MSFT]]

Hello,

Thank you for using newsgroup!

From your post, I am glad to hear that the event error has not been
occurred on the server. Thanks for Dragos CAMARA's great help.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.




--------------------
| From: "mlai" <[email protected]>
| References: <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
| Subject: Re: Urgent!!! Large amount of DCOM 10020 errors in event log
afte
| Date: Tue, 27 Feb 2007 11:16:06 +0800
| Lines: 65
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
| X-RFC2646: Format=Flowed; Response
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windows.server.general
| NNTP-Posting-Host: 210.176.29.137
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:6741
| X-Tomcat-NG: microsoft.public.windows.server.general
|
| And the the Event log not accessible remotely as due to remote registry
| service being disabled. I have no idea why. The server is behind a
| firewall and has very agressive Anti-virus solutions. So does all
| workstations on the network. Just baffles me........
|
|
| "mlai" <[email protected]> wrote in message
| news:[email protected]...
| > OK. No more 10020 errors after start. But I don't know if the events
are
| > fixed or just being suppressed because in the event log, DCOM inserts
an
| > event saying that duplicate events are suppressed for 86400
secs.........
| > "mlai" <[email protected]> wrote in message
| > news:[email protected]...
| >> OK. Just did that and restarted. I just hopes the server comes back
| >> up.......
| >> "Dragos CAMARA" <[email protected]> wrote in message
| >> news:[email protected]...
| >>> try to readd(delete+add) each user/group wich is present there.
| >>> --
| >>> Dragos CAMARA
| >>> MCSA Windows 2003 server
| >>>
| >>>
| >>> "mlai" wrote:
| >>>
| >>>> Thanks. I can see that message from the event itself. However,
what
| >>>> do I
| >>>> change those permissions to?
| >>>>
| >>>> "Dragos CAMARA" wrote:
| >>>>
| >>>> > hi,
| >>>> > The machine wide Default Launch and Activation security descriptor
is
| >>>> > invalid. It contains Access Control Entries with permissions that
are
| >>>> > invalid. The requested action was therefore not performed. This
| >>>> > security
| >>>> > permission can be corrected using the Component Services
| >>>> > administrative tool.
| >>>> > To access Launch and Activation Permissions, run dcomcnfg ->
| >>>> > Component
| >>>> > Services -> Computers -> Right Click My Computer -> Properties ->
COM
| >>>> > Security tab.
| >>>> > --
| >>>> > Dragos CAMARA
| >>>> > MCSA Windows 2003 server
| >>>> >
| >>>> >
| >>>> > "mlai" wrote:
| >>>> >
| >>>> > > My server 2003 had a disk problem and I performed a Disaster
| >>>> > > Restore. After
| >>>> > > the restore, the DHCP database is corrupted and I had restored
the
| >>>> > > backup
| >>>> > > from the set again and it restored itself. However, there are
now
| >>>> > > over 30+
| >>>> > > DCOM 10020 errors in the event log everytime my server starts,
and
| >>>> > > I cannot
| >>>> > > access the event log remotely anymore.
| >>>> > >
| >>>> > > Can anybody help please? I am quite desperate......
| >>>> > >
| >>
| >
|
|
|