DCOM error Access Denied in service

From: Otis Bricker (obricker_at_my-dejanews.com)
Date: 09/04/03


Date: Thu, 04 Sep 2003 12:20:50 -0700


This may be something obvious but I am missing it. W2k Client and Server
used thoughout.

I have an NT service that creates gets an interface to a COM server(.exe) I
wrote. When I have the service run as an administrator, it accesses the
SERVER fine. If I access the SERVER from a GUI on the same machine, logged
in as a non-admin, all is fine. But when I have the service run as that
non-admin, CoCreateInstance for the server fails and I get a message in the
event log saying that there was a DCOM error:

Access denied attempting to launch a DCOM Server. The server is:
{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}
The user is UserName/DomainName, SID=S-1-5-21-XXXXXXXXX-XXXXXXXXX-XXXXXXXX-
XXXX.

The instance of the SERVER should be running on the same machine as the
SERVICE. And is created calling:

ICnvApplictionPtr m_papp; //com_ptr_t<ICnvApplication>

m_pApp.CreateInstance(__uuidof(CnvApplicationATL),NULL,
CLSCTX_LOCAL_SERVER);

So I would think DCOM should be able to stay out of this.

I can create an ADODB::ConnectionPtr in the same thread with CLSCTX_ALL and
it works fine as the non-admin;

This has bugged me all week. Could someone point out where the hole in my
head is?

Otis



Relevant Pages

  • Re: DCOM Error in SBS20032 SP1
    ... You may disable DCOM for this service on the Windows server. ... you will see the of the DCOM application. ... Microsoft CSS Online Newsgroup Support ... |>> obviously it did not resolve the error and have no idea where to go. ...
    (microsoft.public.windows.server.sbs)
  • RE: DCOM Server Event ID 10003
    ... I don't know what DCOM is. ... And I don't understand what Microsoft ... "Access denied attempting to launch a DCOM Server using ... > an instance of a word application / a word document using DCOM. ...
    (microsoft.public.windows.server.sbs)
  • Re: RPC DCOM MS03-026 HACK
    ... If you think the patch failed to protect you against further DCOM RPC ... I'm pretty sure Microsoft has full time employees that do nothing but track ... running a web server without a firewall. ...
    (microsoft.public.win2000.security)
  • RE: attempt to launch a DCOM server?
    ... attempt to launch a DCOM server? ... Your network firewall and IDS products do not prevent Web application ... Download a FREE whitepaper on "Security Policy Automation for Web ...
    (Focus-Microsoft)
  • RE: attempt to launch a DCOM server?
    ... One intersting thing on one my servers, in the event veiwer, the user attempting to use DCOM is the IUSR account, all my applications that use DCOM are assigned specific accounts to use.I am very curious about this. ... attempt to launch a DCOM server? ... Your network firewall and IDS products do not prevent Web application ... Download a FREE whitepaper on "Security Policy Automation for Web ...
    (Focus-Microsoft)