DCOM Fehlermeldungen zu Objekt 486DD18C-B031-4586-AAF1-C1A92C57E4CC Drucken E-Mail
DCOM Fehlermeldungen zu Objekt 486DD18C-B031-4586-AAF1-C1A92C57E4CC

Im System-Protokoll sind Fehlermeldungen zu sehen wie folgt:

Quelle: DCOM
Die Sicherheitsbeschreibung für Start und Aktivierung der COM-Serveranwendung mit CLSID 486DD18C-B031-4586-AAF1-C1A92C57E4CC ist ungültig.

Auf dem System ist McAfee Protection Pilot oder McAfee EPolicy Orchestrator installiert.

Abhilfe:

Ändern Sie die Start- und Aktivierungsberechtigungen des DCOM-Objekts narepl32 wie in der Knowledge Base bei McAfee beschrieben:

DCOM Event ID 10021 relating to {486DD18C-B031-4586-AAF1-C1A92C57E4CC} [7079308]



Question or Problem

ePolicy Orchestrator (ePO) 3.5 and ProtectionPilot 1.1 display the following error on Windows 2003 SP1 or XP SP2 computers:
DCOM error 10021 relating to {486DD18C-B031-4586-AAF1-C1A92C57E4CC}

ePO 3.0.x displays the following error:
DCOM error 10021 relating to {BA126AD1-2166-11D1-B1D0-00805FC1270E}

DCOM errors in the Application event log when a Pull task or Replication task runs

Description in the Application event log:
Event ID: 10021
Description: The launch and activation security descriptor for the COM Server application with CLSID {486DD18C-B031-4586-AAF1-C1A92C57E4CC} is invalid. It contains Access Control Entries with permissions that are invalid. The requested action was therefore not performed. This security permission can be corrected using the Component Services administrative tool.


Solution

NOTE: This article was previously published as KB41482.

Setting DCOM security permissions for narepl32 in Windows XP, SP1 / Windows 2003:
Step 1 - Generating default security permissions:
  1. Click Start, Run, type: dcomcnfg, and click OK.
  2. Double-click Component Services, Computers, My Computer, DCOM Config.
  3. Right-click on narepl32 and select Properties.
  4. Click the Security tab.
  5. In the Launch and Activation Permissions section, ensure that the Customize option is enabled.
  6. In the same section, click Edit.
  7. In the Launch Permission window, select the SYSTEM object from the Group or user names section and click Remove.
  8. Repeat the above step for ANY / ALL remaining objects in the Group or user names section.
  9. Click OK to close the Launch Permission window.
  10. Click Apply to save all changes.
  11. Select Use Default, click OK to close the narepl32 Properties Window.
  12. Right-click on narepl32 again and select Properties.

    New default values have now been generated.
Step 2 - Adjusting the default security permissions:
  1. Under Launch and Activation Permissions select the Customize option (if required) and click Edit.
    The Group or user names section shows the default security objects that have been re-created in step 1.
  2. Remove any object other than SYSTEM and Administrators and click OK.
  3. Click OK to save all changes.
  4. Exit Component Services.

    The next launch of a Pull or Replication task should execute without the error being generated.


Cause

Changes made to DCOM permissions by the service pack applied.

Product Names

McAfee ePolicy Orchestrator 3.x.x
McAfee ProtectionPilot 1.x.x
McAfee AutoUpdate Architect 1.1.2
Microsoft Windows 2003 SP1
Microsoft Windows XP SP2
Microsoft DCOM


Changes

Service Pack 1 applied to Microsoft Windows 2003 server.
Service Pack 2 applied to Microsoft Windows XP SP1.