DCOM Problems

[Guest]

HI, please could anybody give me help or information about the following
message that appears every 2-4 mins in the error logs

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10003
Date: 24/01/2005
Time: 09:39:39
User: N/A
Computer: JG007
Description:
Access denied attempting to launch a DCOM Server using
DefaultLaunchPermssion. The server is:
{00020906-0000-0000-C000-000000000046}
The user is Unavailable/Unavailable, SID=Unavailable.

Thanks

 

[John John]

It's a bug with Microsoft Word. The type library
({00020906-0000-0000-C000-000000000046}) is wrong and I haven't found a
cure for it on the MS site, just an acknowledgment that there is a error
with it or obscure fixes that require a degree in computer science to
figure out. You can have a look for yourself, if you can make any sense
of of it all the better for you.

BUG: Word 2000 Version Key Doesn't Match Its Type Library Version
http://support.microsoft.com/default.aspx?scid=kb;en-us;249626

How to configure Office applications to run under a specific user account
http://support.microsoft.com/default.aspx?scid=kb;en-us;288367

Or just search on the KB for the type library or Event ID for other hits
on the subject.

It may be just as easy or even better to just try to disable DCOM and
see if the error goes away, DCOM is a HUGE security risk anyway. See if
this can help:

How to disable DCOM support in Windows
http://support.microsoft.com/default.aspx?scid=kb;en-us;825750

or a quick crash course on DCOM here http://grc.com/dcom/ along with a
small utility to disable it.

John

 

[George Hester]

Well now why wouldn't this work:

Word2000_Bug_fix.reg
_______________________________
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\TypeLib\{00020906-0000-0000-C000-000000000046}]

[HKEY_CLASSES_ROOT\TypeLib\{00020906-0000-0000-C000-000000000046}\9]
@="Microsoft Word 9.0 Object Library"

[HKEY_CLASSES_ROOT\TypeLib\{00020906-0000-0000-C000-000000000046}\9\0]

[HKEY_CLASSES_ROOT\TypeLib\{00020906-0000-0000-C000-000000000046}\9\0\win32]
@="C:\\Program Files\\Microsoft Office\\Office\\MSWORD9.OLB"

[HKEY_CLASSES_ROOT\TypeLib\{00020906-0000-0000-C000-000000000046}\9\FLAGS]
@="0"

[HKEY_CLASSES_ROOT\TypeLib\{00020906-0000-0000-C000-000000000046}\9\HELPDIR]
@="C:\\Program Files\\Microsoft Office\\Office\\"

Don't see how it could hurt.

 

[Guest]

Hi, thanks for the replies but I am running word 97 and they seem to deal
with word 2000

Thanks

James

 

[George Hester]

If we can identify the application that is causing this we can fix it easliy. If you go to Start | Run | dcomcnfg | OK you
will see all your DCOM servers in the system. Select on say Microsoft Word Document.. Then choose Properties... |
Security. There you will see Use default Launch permissions. If you select Use Custom Launch permissions and then
Edit...you should see all the users that have access and their permissions to launch the Catalog Class. You want to be
sure that you never have a SID (a weird sequence of numbers). What that is is a User that was once made was deleted
and now all that is left of it is its SID. That's your trouble. You have one of these entries I'll bet with only a SID in the
defualt Launch Permissions. That user was deleted or removed in some fashion and so now we have this issue. Check
each of the buttons there so you can look at the defualt Users that come up when you check the Cusom option button.
We are looking for a SID or a User that is no longer on your system.

 

[Guest]

Hi, Thanks for the reply but I have looked all the way through the dcomcnfg
and can'y find any programs with incorrect users

Thanks

James

 

[George Hester]

Your error message says this:

The user is Unavailable/Unavailable, SID=Unavailable.

That's where the problem lies. I made a mistake earlier because I changed it in midstream. Where I said, "If you select
Use Custom Launch permissions and then Edit...you should see all the users that have access and their permissions to
launch the Catalog Class." I should have said, "If you select Use Custom Launch permissions and then Edit...you should
see all the users that have access and their permissions to launch the 'Microsoft Word Document.'"

Check your users in right-click My Computer | Manage | Local Users and Groups. Make sure you do not have a SID
as a user. Another place to check is in Local Security Policy in the Administrative Tools in the Control Panel. Make
sure there are no SID users under Local Policies | Secuity Options. Double-click each entry on the right and make sure
there are no SID entries. All users should be explicit usernames not SIDs.

 

[Guest]

I can't see and 'Sid's' but when I looked under the loacal security policy
can see that there are three accounts listed in bold: my login, aspnet and
service with service being the only one not listed as an account, could this
be the problem?.

the user service is listed for : impersonate a client after authentication &
create global objects

Thank you very much for assisting with this problem !

James

 

[George Hester]

Well Local Security is an applet off the Administrator Tools in the Control Panel. You open that up and down the tree
on the left you select Local Policies | User Rights Assignment. It is in here I was hoping you would find a SID instead of
a user friendly name. What you have listed looks to me like what you have in Local Users and Groups gotten to by
right-clicking My Compter on desktop | Manage | Local Users and Groups. So until I can be sure we are both in the
same place I really cannot give an opinion on this "service" you mention.

See Local Security Policy has a whole bunch
of entries each with a different profile (user) qualified for that "entry." For example there is an entry called Access this
computer from the network. Double-clicking that you will see all the profiles (users) qualified to access this computer
from the network. If you see any SIDs in there we should clean that up. That is just one. You need to check them all
in the same fashion. I truly believe you have a SID undefined. And that SID at one time had permissions to Launch that
DCOM server.

See when you start your computer Microsoft Office Applications each go through a startup sequence
you can see them start and stop in the Task Manager right after you get to the desktop. They quickly go away so you
got to be fast to see this.

 

[Guest]

Hi, one thing that I should have said is that the only things running are all
my starrtup (roxio,zonealarm,fprot(virus)) and internet explorer 6 sp1 I have
installed word 97 but have never used it yet.

for the previous response I was looking in local security settings/local
policies/user rights assignment, and the ASPNET, JG007 (me and SERVICE are
the only accounts listed in bold the other ones are just things like
administrators,power users, backup operators and guest.

ASPNET+ JG007 are listed as accounts under my computer but not SERVICE and I
can't find any trace of SID's anywhere

Thanks!

sorry for this dragging on a bit!

 

[George Hester]

OK. Have you tried uninstalling Word 97 and then reinstall it?

Here is what I have found on your issue:

http://support.microsoft.com/default.aspx?scid=kb;en-us;886137

That one lists your issue almost exactly. Trouble is we are not using the same application. I have found that the issue
was experienced here:

http://castlecops.com/postt98410.html

A response says, "Something is trying to start up MSWord on your computer." Thiis is actually normal. I already
mentioned it. We are having an access denied. Discussed here:

http://support.microsoft.com/kb/290398

Let's try http://www.eventid.net

Look at this article;

http://support.microsoft.com/kb/323287

Just the first part Set Default Permissions for All Distributed COM Programs:

Try to do what it says in that part. Make sure you have these settings at least. If you do not have IIS installed (you
should because your are using the .NET Framework - user ASPNET) ignore IUSR_MachineName.:

Default Access Permissions:
Everyone Allow Access.
I also have IUSR_MachineName in there

Default Launch Permissions:
Adminstrators
Interactive
IUSR_MachineName
IWAM_MachineName
System
all have allow launch permissions

Default Configuration Permissions
Administrators: Full Control
Authenticated Users: Read
Creator Owner: Full Control
Everyone: Read
Server Operators: Special access
System: Full control.

Lets assume you have all these as much as you have for your system. Then let us uninstall Word and then reinstall it.
After the uninstall reboot and clear out of your Temp folders all you can. Then reinstall Word. Do all this while signed
in as Administrator. If you want to sign in later with a lesser account, reboot with the Word CD-ROM in the drive.
Let's see if we can't nip this now.

 

[Guest]

Hi, Thank you very much for your time and assistance with this problem, after
going through the steps in your recent reply the problem seems to have gone
away.

thanks again

James

ps. sorry for taking some time to reply to this!