Event Viewer entry

[Dr_No]

An error message begining "The machine wide Default Launch and Activation
security descriptor is invalid" is constantly repeated in the system log.
Evidently it contains invalid permissions in the Access Control Entries, but
neither my computer manufacturer nor one of my software-savvy colleagues can
remedy it using the Component Services administrative tool as suggested.
Does it matter ? - and if so, where do I go from here? Any advice would be
welcome.

 

[Wesley Vogel]

Source is DCOM
Event ID is 10020

The machine wide Default Launch and Activation security descriptor is
invalid

<quote>
From a newsgroup post: "I fixed the problem manually by running dcomcnfg,
then going into Component Services -> Computers -> Right Clicked My
Computer -> Properties -> COM Security tab. Then, under Launch and
Activation Permissions, clicked Edit Default, removed the IWAM account then
added it back with the full permissions it had".
<quote>
http://www.eventid.net/display.asp?eventid=10020&eventno=5388&source=DCOM&phase=1

see also...

http://msdn.microsoft.com/library/d...html/871ae88f-ed2c-4078-8160-b0a490390426.asp

http://msdn.microsoft.com/library/d...html/274e3d08-1f38-4179-b7e7-b218d6e184ee.asp

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Dr_No]

Fascinating - I had spotted the IWAM post and deleted the account, but do
not know how to add it back. The result is no more error messages in the
security log, and apparently no side effects from removing the IWAM account
from the list. I've been usin the computer fully for over 24 hours with this
removed and it seems to be doing everything it should.......I shall let you
know if anything adverse turns up as a result - thank you for the help.

 

[Dr_No]

Sorry - in the previous post, for "scurity log" please read "system log."

 

[Wesley Vogel]

I had spotted the IWAM post and deleted the account, but do

not know how to add it back.

IWAM has something to do with Internet Information Services (IIS).

<quote>
If you delete the default user accounts for Microsoft Internet Information
Services (IIS), the accounts are re-created when the IIS Admin service is
restarted.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InetStp
DisableUserAccountRestore

If the registry key exists, the accounts are not automatically re-created.
If the registry key does not exist, the accounts are re-created.
<quote>
from...
IUSR and IWAM Accounts Are Re-created When the IIS Admin Service Is
Restarted
http://support.microsoft.com/kb/822165

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In