DCOM 10006

Hi

One of the XP Pro sp2 pc's on our SBS2003 network is getting multiple
entries in the event log.

Any ideas please?

Thanks & regards,

Daniel.

Product: Windows Operating System
ID: 10006
Source: DCOM
Version: 5.0
Component: System Event Log
Symbolic Name: EVENT_RPCSS_REMOTE_SIDE_ERROR
Message: DCOM got error "%%%1" from the computer %2 when attempting to
activate the server:
%3

 

Hi Daniel,

Thank you for posting in SBS newsgroup.

From your description, I understand you have got event 10006 on your XP
client. If I have misunderstood your concerns, please do not hesitate to
let me know.

As I know, the event indicates a program on this computer could not access
a program on the remote computer. Do you find any related events indicating
that a program could not be started or that an access denied error occurred
on SBS's Event Viewer. If the event log indicates an access-denied error,
please change the DCOM permissions. For detailed information, please refer
to the following link:

Event 10006:
http://www.microsoft.com/technet/support/ee/result.aspx?EvtSrc=DCOM&EvtID=10
006&ProdName=Windows+Operating+System&LCID=1033&ProdVer=5.0

If the problem still persists, please check if DCOM is disabled on the
Windows xp computer. If so, please enable it.

1. Run Dcomcnfg.exe.
2. Click the "Component Services" node under "Console Root".
3. Open the "Computers" folder.
4. For the local computer, right-click "My Computer", and then click
"Properties".
5. For a remote computer, right-click "Computers" folder, point to "New",
and then click "Computer".
6. Type the computer name.
7. Right-click the computer name, and then click "Properties".
8. Click the "Default Properties" tab.
9. Click to select the "Enable Distributed COM on this Computer" check box.

Note: If the option is already enabled, please make sure under the Default
Properties tab, Default Authentication Level is set to Connect. Default
Impersonation Level is set to Identify.

10. Click "OK" to apply the changes and quit Dcomcnfg.exe.
11. Restart the operating system for the changes to take effect.

Please test the issue again.

If the problem still happens, please run Dcomcnfg.exe again, and change
Default Impersonation Level to Impersonate. Test again.

You may also try to disable all non-Microsoft services and startup items to
see if the event still appears:

1) Run "msconfig".
2) In the Services tab, click "Hide All Microsoft Services" and click
"Disable All".
3) In the Startup tab, click "Disable All". Click OK. (This will
temporarily prevent third-party programs from running automatically during
start-up.)
4) Restart the computer and keep monitoring it. Does the event still exist?

In addtion, I provide some KB articles for your reference:

325752 Event ID 10006 appears in the system event log when you start the MOM
http://support.microsoft.com/?id=325752

330341 XCCC: Event IDs 10006, 10002, 2002, and 8199 Are Logged Every Few
http://support.microsoft.com/?id=330341

hope the information help and I look forward to your reply.

Best regards,

Crinal
--------------------
| From: "Daniel" <>
| Subject: DCOM 10006
| Date: Mon, 4 Jul 2005 16:58:09 +0100
| | Newsgroups: microsoft.public.windows.server.sbs
| |
| Hi
|
| One of the XP Pro sp2 pc's on our SBS2003 network is getting multiple
| entries in the event log.
|
| Any ideas please?
|
| Thanks & regards,
|
| Daniel.
|
| Product: Windows Operating System
| ID: 10006
| Source: DCOM
| Version: 5.0
| Component: System Event Log
| Symbolic Name: EVENT_RPCSS_REMOTE_SIDE_ERROR
| Message: DCOM got error "%%%1" from the computer %2 when attempting
to
| activate the server:
| %3
|
|
|
|
|

 

Hi

Thanks for picking this up.

This looks like the error:
http://www.microsoft.com/technet/su...indows+Operating+System&LCID=1033&ProdVer=5.0

Although it is not obvious if it is memory or access denied problem. The PC
has 512mb or RAM and Task Manager does not seem to indicate it is
struggling.

Can you advise do I edit the registry on the server or the PC with the error
if it is an access denied problem?

If on the PC I am struggling to find this key:
HKCR\Clsid\clsid value\localserver32
in the registry. Is it abbreviated?

Regards,

Daniel.

 

Hi Daniel,

You may change the permission on server as following:

1. Run regedit.
2. Expand My Computer | HKEY_CLASSES_ROOT | CLSID | clsid value.
3. Click InprocServer32 and then double click Default on right pane.
4. Follow the remainder steps of that article.

hope the information help and I look forward to your reply.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Daniel" <>
| | Subject: Re: DCOM 10006
| Date: Thu, 7 Jul 2005 13:25:29 +0100
| | Newsgroups: microsoft.public.windows.server.sbs
||
| Hi
|
| Thanks for picking this up.
|
| This looks like the error:
|
http://www.microsoft.com/technet/support/ee/result.aspx?EvtSrc=DCOM&EvtID=10
006&ProdName=Windows+Operating+System&LCID=1033&ProdVer=5.0
|
| Although it is not obvious if it is memory or access denied problem. The
PC
| has 512mb or RAM and Task Manager does not seem to indicate it is
| struggling.
|
| Can you advise do I edit the registry on the server or the PC with the
error
| if it is an access denied problem?
|
| If on the PC I am struggling to find this key:
| HKCR\Clsid\clsid value\localserver32
| in the registry. Is it abbreviated?
|
| Regards,
|
| Daniel.
|
|
|

 

Hi

Thanks for your help with this.

Culprit appears to be HP printer software. Anyone interested should see:

http://forums2.itrc.hp.com/service/...0850&admit=-1335382922+1121171136846+28353475

Regards,

Daniel.

 

Hi Daniel,

Thanks for your reply and sharing.

I am glad to hear the problem is resolved.

It is my pleasure to work with you in this post. If you encounter any
difficulties in the future, please submit the post to the newsgroup. We
are glad to be of the assistance.

Again, thank you for using Microsoft newsgroup. Have a nice day.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Daniel" <>
|| Subject: Re: DCOM 10006
| Date: Tue, 12 Jul 2005 14:07:00 +0100
| | Newsgroups: microsoft.public.windows.server.sbs
| |
| Hi
|
| Thanks for your help with this.
|
| Culprit appears to be HP printer software. Anyone interested should see:
|
|
http://forums2.itrc.hp.com/service/forums/questionanswer.do?threadId=370850&
admit=-1335382922+1121171136846+28353475
|
| Regards,
|
| Daniel.
|
|