MonitorWare Knowledge Base

In the past few eays I have been seeing a few of these each day:

Access denied attempting to launch a DCOM Server. The server is:
{7DA3BE83-DFA6-4A6A-869E-B549A6FE2756}


At first I thought it was related to the MSBLAST worm, but all machines were patched long before the worm hit it big, and aeverything is behind a firewall that blocks the MSBLAST from sneaking in.

Any ideas?

Travis

Hi Travis,

procedure =
if you type ID 10002 Source DCOM in google
you will see on the fifth answer something related to you problem ...(DCOM Error Messages Logged in Event Log )
take a read at KB -> Q298095 will give you answers

direct link -> http://support.microsoft.com/default.as ... -us;298095

i google you isn't it ?

Hope this help you

hi,

we are facing the same problem as Travis.

we did all the necessary things mentioned in both this site link :

http://www.monitorware.com/en/events/de ... ls_id=5120

and as mentioned at microsoft support link :

http://support.microsoft.com/default.as ... -us;290398

can't figure out what exactly is happening.

Thanks,
Mohith

Did you run IISlock tool on the effected server?
If so run it again and hopefully it will reverse the reverts the security permissions.

I also banged my head againsted the wall on this one. I found out that Microsoft Baseline Security Analyzer was the cause. I ran the lockdown tool several days ago, and the Security Analyzer was still attemping to check IIS. I unchecked the IIS option and have not seen the event since.

Yes this tool can have site effects. I have heard this from a friend some time ago. He also run the tool and half of all websites did not work. I manually corrected the problems then and it worked again.