DCOM Error 10003

[Dave]

All of our workstations running Windows 2000 Professional
and Windows XP Professional have been getting this error
repeatedly since March 31st. About once every few
minutes. None of our servers have gotten this error so
far.

From what I can tell from Microsoft Support articles, this
is a problem with IIS, only IIS is not installed onto any
of our workstations. Has anyone ran into this or know
what is causing this?

System Event Log Entry...

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10003
Description:
Access denied attempting to launch a DCOM Server using
DefaultLaunchPermssion. The server is:
{00020906-0000-0000-C000-000000000046}
The user is Unavailable/Unavailable, SID=Unavailable.

 

[Tim]

Weird.

A registry search on this shows that 00020906-0000-0000-C000-000000000046
remaps to WinWord.
So, this is saying that something is attempting to create an instance of a
word application / a word document using DCOM.
Begs the question who? The Why bit is scary.

Perhaps turn on security auditing on one of the machines concerned to try
and see where the requests are coming from.
Failing that, I would check the systems are patched up to date, secure, and
properly firewalled IE no idea at all.

- Tim

 

[Guest]

I am having the exact same problem, same date started everthing. If someone finds a resolution please let me know. The systems are patched, cheecked the audit logs and do not see anything different thatn usua

----- Tim wrote: ----

Weird

A registry search on this shows that 00020906-0000-0000-C000-00000000004
remaps to WinWord
So, this is saying that something is attempting to create an instance of
word application / a word document using DCOM
Begs the question who? The Why bit is scary

Perhaps turn on security auditing on one of the machines concerned to tr
and see where the requests are coming from
Failing that, I would check the systems are patched up to date, secure, an
properly firewalled IE no idea at all

- Ti

 

[bafbaf69]

Hello Dave,

I have been receiving these messages in my eventlog from 31st March 2004:

Access denied attempting to launch a DCOM Server. The server is:
{00020906-0000-0000-C000-000000000046}
The user is Unavailable/Unavailable, SID=Unavailable.

Have you found any solution??

Regards,
bafbaf69

 

[Marina Roos [SBS-MVP]]

You won't be charged if you need this hotfix. Just call them up and tell
them you need the hotfix for Qwhatever number. They will ask you for a
emailaddress and send you a link where you can get the patch.

--
Regards,

Marina
Microsoft SBS-MVP

I also am now getting this error popping up in my system event viewer,

every 4 minutes. Yo Microsoft you say you have a hotfix for this but you do
not give it to us what is up with that.

SYMPTOMS
After you install Microsoft Windows 2000 Service Pack 4 (SP4), or you

apply any Microsoft COM+ Rollup Hotfix that is later than COM+Rollup Hotfix
Package 20, you may notice many TCP/IP connections to port 135.

CAUSE
A change in DCOM that was first made in COM+ Rollup Hotfix Package 21

causes a part of DCOM to use the Negotiate security package instead of the
NTLM security package. The Negotiate package does not have correct
credential pooling logic, forcing DCOM to create many connections in some
situations.

RESOLUTION
Hotfix information
A supported hotfix is now available from Microsoft, but it is only

intended to correct the problem that is described in this article. Only
apply it to systems that are experiencing this specific problem. This hotfix
may receive additional testing. Therefore, if you are not severely affected
by this problem, Microsoft recommends that you wait for the next Windows
2000 service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Product Support

Services to obtain the hotfix. For a complete list of Microsoft Product
Support Services phone numbers and information about support costs, visit
the following Microsoft Web site:

http://support.microsoft.com/default.aspx?scid=fh;[LN];CNTACTMS

Note In special cases, charges that are ordinarily incurred for support

calls may be canceled if a Microsoft Support Professional determines that a
specific update will resolve your problem. The usual support costs will
apply to additional support questions and issues that do not qualify for the
specific update in question.

So not after calling you yesturday so i could get MSVM to work you now

want me to call and pay for this, come on pull you head from the sand I do
not have that kind of money but I now see how Bill gets rich. Just for
giggles why does word need access to the internet.

 

[jgtjones]

Problem is that MS will not supply a hotfix without the
Qwhatever number. Does anyone know "Qwhatever"

-----Original Message-----
You won't be charged if you need this hotfix. Just call them up and tell
them you need the hotfix for Qwhatever number. They will ask you for a
emailaddress and send you a link where you can get the patch.

--
Regards,

Marina
Microsoft SBS-MVP

I also am now getting this error popping up in my

system event viewer,
every 4 minutes. Yo Microsoft you say you have a hotfix for this but you do
not give it to us what is up with that.

SYMPTOMS
After you install Microsoft Windows 2000 Service Pack 4

(SP4), or you
apply any Microsoft COM+ Rollup Hotfix that is later than COM+Rollup Hotfix
Package 20, you may notice many TCP/IP connections to port 135.

CAUSE
A change in DCOM that was first made in COM+ Rollup

Hotfix Package 21
causes a part of DCOM to use the Negotiate security package instead of the
NTLM security package. The Negotiate package does not have correct
credential pooling logic, forcing DCOM to create many connections in some
situations.

RESOLUTION
Hotfix information
A supported hotfix is now available from Microsoft, but

it is only
intended to correct the problem that is described in this article. Only
apply it to systems that are experiencing this specific problem. This hotfix
may receive additional testing. Therefore, if you are not severely affected
by this problem, Microsoft recommends that you wait for the next Windows
2000 service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft

Product Support
Services to obtain the hotfix. For a complete list of Microsoft Product
Support Services phone numbers and information about support costs, visit
the following Microsoft Web site:

http://support.microsoft.com/default.aspx?scid=fh; [LN];CNTACTMS

Note In special cases, charges that are ordinarily

incurred for support
calls may be canceled if a Microsoft Support Professional determines that a
specific update will resolve your problem. The usual support costs will
apply to additional support questions and issues that do not qualify for the
specific update in question.

So not after calling you yesturday so i could get MSVM

to work you now
want me to call and pay for this, come on pull you head from the sand I do
not have that kind of money but I now see how Bill gets rich. Just for
giggles why does word need access to the internet.


.