RE: Access Denied when running RSoP

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Dear Customer,

Thank you for posting back!

I am glad to hear that the issue has being solved!

Based on my research, if we disable support for DCOM, the following may
result:

a. Any COM objects that can be started remotely may not function
correctly.

b. The local COM+ snap-in will not be able to connect to remote servers to
enumerate their COM+ catalog.

c. Certificate auto-enrollment may not function correctly.

d. Windows Management Instrumentation (WMI) queries against remote servers
may not function correctly.

It is my pleasure to work with you in this post. If you need any assistance
regarding SBS server in the future, please feel free to post back to this
Great Newsgroup. We are glad to be working with you again!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>Thread-Topic: Access Denied when running RSoP
>thread-index: AcYR/azqd1lq7gfGTkCLBGSgIR3iTg==
>X-WBNR-Posting-Host: 83.117.209.47
>From: "=?Utf-8?B?QWQgdmFuIGRlbiBCcm9law==?="
<AdvandenBroek@xxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <3ACD6B4A-7ECF-4F08-8973-AA0F3BEA457A@xxxxxxxxxxxxx>
<1mTNBdBEGHA.3592@xxxxxxxxxxxxxxxxxxxxx>
<C2DA20FE-BD2B-44E1-BC9B-3736208E4A99@xxxxxxxxxxxxx>
<RF2iDpREGHA.832@xxxxxxxxxxxxxxxxxxxxx>
<5DE2DF1C-025D-4DD0-A1CA-AD28BF1C558A@xxxxxxxxxxxxx>
<hbnQepcEGHA.1236@xxxxxxxxxxxxxxxxxxxxx>
<09B940B8-1B2E-4F7E-A6D1-DAAEB39F55F4@xxxxxxxxxxxxx>
>Subject: RE: Access Denied when running RSoP
>Date: Thu, 5 Jan 2006 05:41:05 -0800
>Lines: 265
>Message-ID: <F83311E7-C93F-4BAA-BE35-19A64582B901@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 8bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:234326
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Hi Brandy,
>
>I checked a couple of other systems at our customers' sites.
>They had all enabled the "enable Distributed COM on this computer".
>So, I tried again to enable this option on my machine, but now followed by
a
>reboot.
>Result: now the RSoP works OK !!!!
>
>Thanks for your leading me through the wonders of DCOM and WMI!
>
>Regards,
>Ad.
>
>"Ad van den Broek" wrote:
>
>> Thank you for your thorough follow-up.
>>
>> Regarding your double-check: Yes, I can run RSOP locally on the SBS
server
>> itself, selecting â??This computerâ?? or typing in the name of the
server.
>> Itâ??s also possible to run RSOP on an XP PC to any other PC in the
domain,
>> even to a Windows 2003 Terminal Server, but not to the SBS Server (again
>> â??access deniedâ??). The SBS Server itself can only RSOP itself, not
other PCs
>> or servers.
>>
>> I did the checks you asked for:
>>
>> 1. Remote registry is running on all machines
>>
>> 2.1 The WMI property pages appear OK, the versions are correct on both
the
>> XP machine and the SBS Server
>>
>> 2.2 Trying to connect from the SBS Server to the PC: Failed to connect
to
>> \\pc-name, because: â??Win32: Access is deniedâ??. Trying to connect
from the PC
>> to the SBS Server (with or without changing user credentials to
>> administrator): keeps displaying the message â??Connecting to WMIâ??,
after
>> cancelling: the same Access Denied message.
>> Trying to connect from my PC to another PC: works fine!
>>
>> 3.1 Default Launch permissions are OK on both machines. Default Access
>> Permissions as well, however the SYSTEM account has no â??Remote
Accessâ??
>> privileges. Have tried it with this privilege enabled, no result.
Deleted the
>> DefaultAccessPermission key, the default seems to be that SYSTEM does
not
>> need this â??Remote Accessâ?? privilege. In the Default Launch
Permissions the
>> users INTERACTIVE and SYSTEM do not have the Remote Launch and Remote
>> Activation privileges on SBS, where they do have these privileges on the
XP
>> machine. Tries to switch them on, no result. I looked also on the
Default
>> Properties pages on both machines. On SBS the â??Enable Distributed COM
on this
>> computerâ?? was off, on the XP machine itâ??s on. Enabled the option on
SBS,
>> still no result.
>>
>> 3.2 All default WMI DCOM settings are ok.
>>
>> Iâ??m already out of options for a long time, hope you are notâ?¦..
>>
>> Regards,
>>
>> Ad.
>>
>> Thank you for your thorough
>>

.

Relevant Pages

  • RE: document spools then disappears in Remote printing in RWW
    ... then access RWW site and then connect to the server box to print? ... The remote machine ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • SecurityFocus Microsoft Newsletter #172
    ... MICROSOFT VULNERABILITY SUMMARY ... LionMax Software WWW File Share Pro Remote Denial of Service... ... Sun Microsystems Sun One Web Server Remote Buffer Overflow V... ...
    (Focus-Microsoft)
  • Re: VPN, mapped drives
    ... cannot access the shares on the SBS Server thru VPN ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Access
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... How many network adapter you installed on the SBS server box? ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot connect to desktops on LAN using RWW or RDC
    ... Microsoft CSS Online Newsgroup Support ... but you can RDP to the server. ... >> Users cannot connect to remote desktops by using the Windows Small ...
    (microsoft.public.windows.server.sbs)