Video Screencast Help

DCOM Problem when I open Endpoint Manager

Created: 08 Apr 2009 • Updated: 21 May 2010 | 4 comments
Jim2009's picture

Hi,

I have Symantec Endpoint Manager install on a fresh new installed Windows Server 2003 R2 SP2.

This server is a DC.

I know it's not the best setting but i don't have the choice. I have the same setting on my test domain and i don't have any problem.

When i open the consol on the manager server, I get around 5 or 10  DCOM error in event viewer.

This is the error:

Type : Error
Source : DCOM
ID: 10016
User : Domain\IUSR_SRV01
Computer :SRV01
Description :

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {000C101C-0000-0000-C000-000000000046} to the user Domain\IUSR_SRV01 SID (<SID>). This security permission can be modified using the Component Services administrative tool.

If i give the Local Activation permission on CLSID {000C101C-0000-0000-C000-000000000046} to Domain\IUSR_SRV01, DCOM errors are not generated but i have a biger problem.

When I try to open the consol it's still loading for 5 minutes and the home page give me this error:

Bad gateway -  The server received an invalid response from another server while attempting to fulfill the request.
 
Im getting this error on first three tabs (Home, Monitors, Reports) but the rest of the tabs (Policies, Clients, Admin) are working fine.

If i look in event viewer, i have this 2 events generated a couple of time during consol loadind:

Type : Information
Source : Service Control Manager
ID :7035
User : AUTORITE NT\SYSTEM
Computer :SRV01
Description :

The Windows Installer service was successfully sent a start control.

Type : Information
Source : Service Control Manager
ID :7036
User : AUTORITE NT\SYSTEM
Computer :SRV01
Description :

The Windows Installer service entered the stopped state.

I hope somebody gonna be able to help me.

Thx!

Sorry for my english

Comments 4 CommentsJump to latest comment

pete_4u2002's picture

hi,
though the below url is meant for Win xp, you may check the same for Win 2k3

http://support.microsoft.com/kb/899965

as SEPM is mostly on Apache and IIS, you may need to check for the permission related issue for IIS.
Is this box hardened?

Cheers
Pete!

Jim2009's picture

hi,
though the below url is meant for Win xp, you may check the same for Win 2k3

http://support.microsoft.com/kb/899965

as SEPM is mostly on Apache and IIS, you may need to check for the permission related issue for IIS.
Is this box hardened?

Cheers
Pete!

I already try to give permisson on CLSID but  i didn't make de second part of the procedure.

I followed all the step of the procedure and i got the same problem but with2 new events.

When i start Endpoint console i got this events in order:

Event ID 7035
Source Service Control Manager
Type Information
Description The COM+ Application system service was successfully sent a start control.

Event ID 7036
Source Service Control Manager
Type Information
Description The COM+ Application system service entered the running state.

 

Type : Information
Source : Service Control Manager
ID :7035
User : AUTORITE NT\SYSTEM
Computer :SRV01
Description : The Windows Installer service was successfully sent a start control.

Type : Information
Source : Service Control Manager
ID :7036
User : AUTORITE NT\SYSTEM
Computer :SRV01
Description : The Windows Installer service entered the stopped state.

Event ID 10010
Source DCOM
Type Error
Description The server {000C101C-0000-0000-C000-000000000046} did not register with DCOM within the required timeout.

and

Type : Information
Source : Service Control Manager
ID :7035
User : AUTORITE NT\SYSTEM
Computer :SRV01
Description : The Windows Installer service was successfully sent a start control.

Type : Information
Source : Service Control Manager
ID :7036
User : AUTORITE NT\SYSTEM
Computer :SRV01
Description : The Windows Installer service entered the stopped state.

again and again during console is loading for a while

and after Im getting this error on first three tabs

Bad gateway -  The server received an invalid response from another server while attempting to fulfill the request.
 
I don't know if that can help but i have a lot of this event to

Event Type:      Warning
Event Source:      MsiInstaller
Event Category:      None
Event ID:      1004
Date:            3/5/2009
Time:            8:09:16 AM
User:            NT AUTHORITY\SYSTEM
Computer:      SERVER
Description:
Detection of product '{47653B97-E079-454D-8DB9-B323E388FF93}', feature 'Bin', component '{711CBE62-401D-47AC-8919-4C0029EC66DD}' failed.  The resource 'C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\temp\UploadTemp\' does not exist.

-----------------------------------------------------

Followed immediately by:

-----------------------------------------------------
Event Type:      Warning
Event Source:      MsiInstaller
Event Category:      None
Event ID:      1001
Date:            3/5/2009
Time:            8:09:16 AM
User:            NT AUTHORITY\SYSTEM
Computer:      SERVER
Description:
Detection of product '{47653B97-E079-454D-8DB9-B323E388FF93}', feature 'Bin' failed during request for component '{40B71840-0B33-42C7-A11D-EBDD5F3ACB63}'

-----------------------------------------------------

And:

-----------------------------------------------------

Event ID 1015
Source MsiInstaller
Type Warning
Description Failed to connect to server. Error: 0x80080005

I need help!!!  :-(

Sorry but i don't understand your question: Is this box hardened?

Thx!!!

Jim
 

Jason1222's picture

Hi Jim,

Your box is a replication server?
You already have a SEPM server installed on your network and this one is acting as a backup, seems like the IIS server installed on this server is having issues.

You can try this for resolving the MSI issue.
http://support.microsoft.com/default.aspx?scid=kb;en-us;319624

You can also try to remove IIS and download and install the latest version of IIS for Windows Server 2003.  I would also suggest, installing the latest version of JRE (1.6) and SEPM 11 MR4 MP1a. 

What version of SEPM are you running?  If it is pre MR4, what port are you running the server on?  Could possibly be a port conflict, older versions of SEPM (upgraded through time) would not be on the default port 8014 that MR 4 is using...

Jim2009's picture

Hi Jason,

I re-register Windows Installer (http://support.microsoft.com/default.aspx?scid=kb;en-us;319624)

After, i did this procedure (http://support.microsoft.com/kb/899965) again and my problem was solve.

Thanks for your help!!!

Jim