Event ID 10016, Task Controller, every day at 11:32AM

[ANDREY_FYODOROV]

We are getting this event logged in the system event log every day at 11:32AM. We have nothing scheduled for this odd time.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10016
Date:  10/17/2007
Time:  11:32:18 AM
User:  AD\XXXXXXXXXXX
Computer: TOR1MSEV01
Description:
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{7DB927A8-A2F9-4B72-B10B-359353D3A39F}
 to the user AD\XXXXXXXXXXX SID (S-XXXXXXXXXXXXXXXXXXXXXXXXXXXX).  This security permission can be modified using the Component Services administrative tool.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

The CLSID points to EV Task Controller service.

We are running EV7 SP1 on W2003 Std SP1.

What could this be?

[Avro]

The CLSID refers to the taskcontroller.exe, this error can be reproduced if you try to start the taskcontroller service before the directory service has completed it's start up. Once all the services have started this DCOM error should stop until the next time.

Generally there are about 6 logs generated each time the enterprise vault services have been restarted, if this is the case then this can be ignored. if not then follow the following technotes

http://support.veritas.com/docs/275955

http://support.veritas.com/docs/279588

It migh also be worth checking the local security settings on the EV server.

Under Local Policies - Security Policies, check

DCOM: Machine Access restrictions in security descriptor language (SDDL) Syntax

DCOM: Machine Launch restrictions in security descriptor language (SDDL) Syntax

under the properties edit the security and select OK to populate the security descriptor.

Open a command prompt and enter

gpupdate /Force

[Brian_Day]

Ut oh. I opened a sev 'B' ticket with Microsoft this morning also for EventID 10016 DCOM errors. Mine are for the DirectoryService, and causing users to be unable to open archived items.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10016
Date: 10/19/2007
Time: 2:04:32 PM
User: ServiceAccount
Computer: Server
Description:
The application-specific permission settings do not grant Remote Launch permission for the COM Server application with CLSID
{F4D3EB5B-C7C5-11D1-90DB-0000F879BE6A}
to the user ES\EVService SID (S-1-5-21-329068152-1708537768-725345543-91219). This security permission can be modified using the Component Services administrative tool.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Message Edited by Brian Day on 10-19-2007 02:07 PM

[Brian_Day]

Wow, this is painful to admit. :) It ended up being the SQL 2005 service wasn't starting. Once that was fixed, all seemed ok.

[Paul_Visser]

I have the same error with the EV directory services ( {F4D3EB5B-C7C5-11D1-90DB-0000F879BE6A})

We use EV2007sp1 and Windows2003sp2.

I change the DCOM security settings, set the regitstry key:

HKEY_LOCAL_MACHINE\SOFTWARE\KVS\Enterprise Vault\AdminService
Value name: SkipChecks
Data Type: REG_DWORD
Radix: hex
Value: 1

But as soon as i reset the admin services all settings are changed back in DCOM

Does anyone have an idee why this happens?

Thanks,

Paul

[jimbo2]

My understanding is that is the way it is designed. The admin service always forces the settings that it should have.

Jim S.

[Jeffrey_Kusters]

I'm receiving the same DCOM errors when the Admin Service is restarted:

Event Type:ErrorEvent Source:DCOMEvent Category:NoneEvent ID:10016Date:13-11-2008Time:14:21:06User:ING-AN\srv-vaultComputer:SEV001Description:The application-specific permission settings do not grant Remote Launch permission for the COM Server application with CLSID {F4D3EB5B-C7C5-11D1-90DB-0000F879BE6A} to the user ING-AN\srv-vault SID (S-1-5-21-731931657-4183511486-2446367610-10493).  This security permission can be modified using the Component Services administrative tool.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

 If the DCOM permissions are reset by design than how can I fix these errors???

Thanks!

Jeffrey 

[Liam_Finn1]

I'm not sure what version of EV you are using but i thought that EV2007 SP4 was supposed to fix this issue