IIS Admin Security Descriptors Problem (Event ID 10021)

5 May 2006 5:39 PM

Daniel

After upgrading from Win2K professional to Windows XP I get the following
error :

The description for Event ID ( 10021 ) in Source ( DCOM ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event:
{A9E69610-B80D-11D0-B9B9-00A0C922E750}.

{A9E69610-B80D-11D0-B9B9-00A0C922E750} being the IIS Admin service and
EventID 10021 being

The launch and activation security descriptor for the COM Server application
with CLSID {<CLSID>} is invalid. It contains Access Control Entries with
permissions that are invalid. The requested action was therefore not
performed. This security permission can be corrected using the Component
Services administrative tool.

Does anyone no how to fix these bad "access control entries?"

--
Daniel

6 May 2006 5:12 AM

Roger Abell [MVP]

As I never seriously did any upgrading from W2k Pro to XP Pro,
and as IIS is not part of default install in XP, I do not know what is
the direct cause of your issue. Also, the service packs for XP
have tightened some aspects of how DCOM activation and access
are handled.

One way out that seems simple is to make a safe copy of your
web content, then uninstall and reinstall IIS 5.1 on your XP.
Following this you may need to reapply service for XP.

Below is the content of a IISAdmin-AppId.reg file that I get on this
XP when I export the named key.

--
Roger Abell
Microsoft MVP (Windows Server : Security)

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\AppID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}]
@="IIS Admin Service"
"LocalService"="IISADMIN"
"LaunchPermission"=hex:01,00,04,80,94,00,00,00,b0,00,00,00,00,00,00,00,14,00,\
00,00,02,00,80,00,05,00,00,00,00,00,24,00,1f,00,00,00,01,05,00,00,00,00,00,\
05,15,00,00,00,4d,64,49,2e,62,5c,bc,06,8a,a7,32,3f,eb,03,00,00,00,00,14,00,\
1f,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,00,00,14,00,1f,00,00,00,01,\
01,00,00,00,00,00,05,04,00,00,00,00,00,18,00,1f,00,00,00,01,02,00,00,00,00,\
00,05,20,00,00,00,20,02,00,00,00,00,14,00,19,00,00,00,01,01,00,00,00,00,00,\
01,00,00,00,00,01,05,00,00,00,00,00,05,15,00,00,00,4d,64,49,2e,62,5c,bc,06,\
8a,a7,32,3f,eb,03,00,00,01,05,00,00,00,00,00,05,15,00,00,00,4d,64,49,2e,62,\
5c,bc,06,8a,a7,32,3f,eb,03,00,00
"AccessPermission"=hex:01,00,04,80,84,00,00,00,a0,00,00,00,00,00,00,00,14,00,\
00,00,02,00,70,00,04,00,00,00,00,00,24,00,01,00,00,00,01,05,00,00,00,00,00,\
05,15,00,00,00,4d,64,49,2e,62,5c,bc,06,8a,a7,32,3f,eb,03,00,00,00,00,14,00,\
01,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,00,00,14,00,01,00,00,00,01,\
01,00,00,00,00,00,05,04,00,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,\
00,01,00,00,00,00,00,00,00,05,15,00,00,00,01,05,00,00,00,00,00,05,15,00,00,\
00,4d,64,49,2e,62,5c,bc,06,8a,a7,32,3f,eb,03,00,00,01,05,00,00,00,00,00,05,\
15,00,00,00,4d,64,49,2e,62,5c,bc,06,8a,a7,32,3f,eb,03,00,00

Show quoteHide quote

"Daniel" <no_spam_sonofsmog@no_spam_hotmail.com> wrote in message
news:%23jnR8qGcGHA.3872@TK2MSFTNGP04.phx.gbl...
> After upgrading from Win2K professional to Windows XP I get the following
> error :
>
> The description for Event ID ( 10021 ) in Source ( DCOM ) cannot be found.
> The local computer may not have the necessary registry information or
> message DLL files to display messages from a remote computer. You may be
> able to use the /AUXSOURCE= flag to retrieve this description; see Help
> and Support for details. The following information is part of the event:
> {A9E69610-B80D-11D0-B9B9-00A0C922E750}.
>
> {A9E69610-B80D-11D0-B9B9-00A0C922E750} being the IIS Admin service and
> EventID 10021 being
>
> The launch and activation security descriptor for the COM Server
> application with CLSID {<CLSID>} is invalid. It contains Access Control
> Entries with permissions that are invalid. The requested action was
> therefore not performed. This security permission can be corrected using
> the Component Services administrative tool.
>
> Does anyone no how to fix these bad "access control entries?"
>
> --
> Daniel
>