- JADOTA – Just Another Day Of The Admin! - http://www.jadota.com -

MOSS 2007 install: Not done just yet…

During the installation of MOSS 2007 I quite often encounter the following error message in the Windows Event Viewer:

The application-specific permission settings do not grant Local Activation permission for the COM Server application with

CLSID {61738644-F196-11D0-9953-00C04FD919C1}

to the user <serverName>\mossService SID (S-1-5-21-<serviceSID>). This security permission can be modified using the Component Services administrative tool.

After searching the web and testing i found that the permissions on the DCOM+ Component Service, specifically the IIS WAMREG Admin Service, to be wrong.

To correct this:

– Copy the GUID part from the event viewer message, in this example {61738644-F196-11D0-9953-00C04FD919C1}

– Start regedit and select the most upper location of the registry tree

– Open the Edit menu and select Find. Paste the GUID in the Find what: field en select Find Next

– The search will stop at a registry entry. In the right pane an application name is referenced for the GUID, in this example it was IIS WAMREG Admin Service

– Open the Compnent Services (Start -> Administrative Tools -> Component Services) en open the following tree: Component Services -> Computers – My Computer -> DCOM Config

– In the list of DCOM objects scroll down until you find IIS WAMREG

– Click on this object with the right mouse button and select Properties

– Select the Security tab

– Make sure that the option Customize is selected under the Launch and Activiation Permission paragraph

– Click on the Edit button

– Add the service account that is mentioned in the event viewer message to the list of Groups or user names

– Give this account the Launch, Activate, Remote Launch and Remote Activate permissions

– Click on OK and again OK to confirm your changes and close the Component Services application.

– Restart IIS (iisreset or reboot) and your done. No more error!

Incoming search terms: