EventViewer DCOM error 10016 {BA126AD1-2166-11D1-B1D0-00805FC1270E}

[Louis Solomon [SteelBytes]]

Hi, I'm getting the followin in my event log

The machine-default permission settings do not grant Local Activation
permission for the COM Server application with CLSID
{BA126AD1-2166-11D1-B1D0-00805FC1270E}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security
permission can be modified using the Component Services administrative tool.

I tried the kb article about looking up the name in regedit, then reseting
the security to defaul in the componenet manger, but I didn't find a
matching componenet!

--
Louis Solomon
www.SteelBytes.com

[Kris Clymans]

Did you just install Windows 2003 SP1? I think that is the Network
Connection Manager CLSID. I had the same error after I installed SP1 on one
of my servers. I changed the permissions back to defualt on the netman com
object and it fixed the issue.

"Louis Solomon [SteelBytes]" wrote:

> Hi, I'm getting the followin in my event log
>
> The machine-default permission settings do not grant Local Activation
> permission for the COM Server application with CLSID
> {BA126AD1-2166-11D1-B1D0-00805FC1270E}
> to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security
> permission can be modified using the Component Services administrative tool.
>
> I tried the kb article about looking up the name in regedit, then reseting
> the security to defaul in the componenet manger, but I didn't find a
> matching componenet!
>
> --
> Louis Solomon
> www.SteelBytes.com
>
>
>

[Downsend]

Hi There
I have same problem :-((
even I have changed permissions to default still I am getting same
error messages please HELP

Kris Clymans wrote:
> Did you just install Windows 2003 SP1? I think that is the Network
> Connection Manager CLSID. I had the same error after I installed SP1
on one
> of my servers. I changed the permissions back to defualt on the
netman com
> object and it fixed the issue.
>
> "Louis Solomon [SteelBytes]" wrote:
>
> > Hi, I'm getting the followin in my event log
> >
> > The machine-default permission settings do not grant Local
Activation
> > permission for the COM Server application with CLSID
> > {BA126AD1-2166-11D1-B1D0-00805FC1270E}
> > to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This
security
> > permission can be modified using the Component Services
administrative tool.
> >
> > I tried the kb article about looking up the name in regedit, then
reseting
> > the security to defaul in the componenet manger, but I didn't find
a
> > matching componenet!
> >
> > --
> > Louis Solomon
> > www.SteelBytes.com
> >
> >
> >

[Downsend]

still no joy :-((

[Mike Roberts]

resetting to default permissions didn't work for our server; someone else had
mentioned adding the NETWORK SERVICE account to the permissions list - that's
not possible because the server is a DC and local accounts are not available.

what now?

[Milan Dadok via WinServerKB.com]

try this
http://support.microsoft.com/?id=827016
Local Service and other well-known security principals do not appear on
your Windows Server 2003 domain controller

[Mike Roberts]

That would appear to solve my problem with the solution to my problem, but
ugh! I don't know if I'm ready to upgrade that PDC emulator to 2k3. We're
small, so it does a lot of jobs, including DNS, DHCP, and Exchange. Scary.

Could I not run dcpromo and demote the problem server, then add the service
account to the permissions as the server would have a local security
database, then run dcpromo again and promote it back to DC?

"Milan Dadok via WinServerKB.com" wrote:

> try this
> http://support.microsoft.com/?id=827016
> Local Service and other well-known security principals do not appear on
> your Windows Server 2003 domain controller
>

[Mike Roberts]

I did it and it worked! Thanks Milan!

"Mike Roberts" wrote:

> That would appear to solve my problem with the solution to my problem, but
> ugh! I don't know if I'm ready to upgrade that PDC emulator to 2k3. We're
> small, so it does a lot of jobs, including DNS, DHCP, and Exchange. Scary.
>
> Could I not run dcpromo and demote the problem server, then add the service
> account to the permissions as the server would have a local security
> database, then run dcpromo again and promote it back to DC?
>
> "Milan Dadok via WinServerKB.com" wrote:
>
> > try this
> > http://support.microsoft.com/?id=827016
> > Local Service and other well-known security principals do not appear on
> > your Windows Server 2003 domain controller
> >

[kayak_16137@yahoo.com]

Milan Dadok via WinServerKB.com wrote:
> try this
> http://support.microsoft.com/?id=827016
> Local Service and other well-known security principals do not appear
on
> your Windows Server 2003 domain controller

I had this exact same problem today. This is how I fixed it. Simply,
add the NETWORK SERVICE user account to the Distributed COM Users
group. That should fix the problem, it did for me. Best wishes...