Endpoint Protection

 View Only
  • 1.  DCOM Problem when I open Endpoint Manager

    Posted Apr 08, 2009 07:47 PM

    Hi,

    I have Symantec Endpoint Manager install on a fresh new installed Windows Server 2003 R2 SP2.

    This server is a DC.

    I know it's not the best setting but i don't have the choice. I have the same setting on my test domain and i don't have any problem.

    When i open the consol on the manager server, I get around 5 or 10  DCOM error in event viewer.

    This is the error:


    Type : Error
    Source : DCOM
    ID: 10016
    User : Domain\IUSR_SRV01
    Computer :SRV01
    Description :

    The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {000C101C-0000-0000-C000-000000000046} to the user Domain\IUSR_SRV01 SID (<SID>). This security permission can be modified using the Component Services administrative tool.



    If i give the Local Activation permission on CLSID {000C101C-0000-0000-C000-000000000046} to Domain\IUSR_SRV01, DCOM errors are not generated but i have a biger problem.

    When I try to open the consol it's still loading for 5 minutes and the home page give me this error:

    Bad gateway -  The server received an invalid response from another server while attempting to fulfill the request.
     
    Im getting this error on first three tabs (Home, Monitors, Reports) but the rest of the tabs (Policies, Clients, Admin) are working fine.


    If i look in event viewer, i have this 2 events generated a couple of time during consol loadind:

    Type : Information
    Source : Service Control Manager
    ID :7035
    User : AUTORITE NT\SYSTEM
    Computer :SRV01
    Description :

    The Windows Installer service was successfully sent a start control.

    Type : Information
    Source : Service Control Manager
    ID :7036
    User : AUTORITE NT\SYSTEM
    Computer :SRV01
    Description :

    The Windows Installer service entered the stopped state.


    I hope somebody gonna be able to help me.

    Thx!

    Sorry for my english



  • 2.  RE: DCOM Problem when I open Endpoint Manager

    Broadcom Employee
    Posted Apr 09, 2009 02:18 AM
    hi,
    though the below url is meant for Win xp, you may check the same for Win 2k3

    http://support.microsoft.com/kb/899965

    as SEPM is mostly on Apache and IIS, you may need to check for the permission related issue for IIS.
    Is this box hardened?

    Cheers
    Pete!


  • 3.  RE: DCOM Problem when I open Endpoint Manager

    Posted Apr 09, 2009 09:22 AM

    hi,
    though the below url is meant for Win xp, you may check the same for Win 2k3

    http://support.microsoft.com/kb/899965

    as SEPM is mostly on Apache and IIS, you may need to check for the permission related issue for IIS.
    Is this box hardened?

    Cheers
    Pete!

    I already try to give permisson on CLSID but  i didn't make de second part of the procedure.

    I followed all the step of the procedure and i got the same problem but with2 new events.

    When i start Endpoint console i got this events in order:

    Event ID 7035
    Source Service Control Manager
    Type Information
    Description The COM+ Application system service was successfully sent a start control.

    Event ID 7036
    Source Service Control Manager
    Type Information
    Description The COM+ Application system service entered the running state.

     

    Type : Information
    Source : Service Control Manager
    ID :7035
    User : AUTORITE NT\SYSTEM
    Computer :SRV01
    Description : The Windows Installer service was successfully sent a start control.

    Type : Information
    Source : Service Control Manager
    ID :7036
    User : AUTORITE NT\SYSTEM
    Computer :SRV01
    Description : The Windows Installer service entered the stopped state.

    Event ID 10010
    Source DCOM
    Type Error
    Description The server {000C101C-0000-0000-C000-000000000046} did not register with DCOM within the required timeout.

    and

    Type : Information
    Source : Service Control Manager
    ID :7035
    User : AUTORITE NT\SYSTEM
    Computer :SRV01
    Description : The Windows Installer service was successfully sent a start control.

    Type : Information
    Source : Service Control Manager
    ID :7036
    User : AUTORITE NT\SYSTEM
    Computer :SRV01
    Description : The Windows Installer service entered the stopped state.

    again and again during console is loading for a while

    and after Im getting this error on first three tabs

    Bad gateway -  The server received an invalid response from another server while attempting to fulfill the request.
     
    I don't know if that can help but i have a lot of this event to


    Event Type:      Warning
    Event Source:      MsiInstaller
    Event Category:      None
    Event ID:      1004
    Date:            3/5/2009
    Time:            8:09:16 AM
    User:            NT AUTHORITY\SYSTEM
    Computer:      SERVER
    Description:
    Detection of product '{47653B97-E079-454D-8DB9-B323E388FF93}', feature 'Bin', component '{711CBE62-401D-47AC-8919-4C0029EC66DD}' failed.  The resource 'C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\temp\UploadTemp\' does not exist.

    -----------------------------------------------------

    Followed immediately by:

    -----------------------------------------------------
    Event Type:      Warning
    Event Source:      MsiInstaller
    Event Category:      None
    Event ID:      1001
    Date:            3/5/2009
    Time:            8:09:16 AM
    User:            NT AUTHORITY\SYSTEM
    Computer:      SERVER
    Description:
    Detection of product '{47653B97-E079-454D-8DB9-B323E388FF93}', feature 'Bin' failed during request for component '{40B71840-0B33-42C7-A11D-EBDD5F3ACB63}'

    -----------------------------------------------------

    And:

    -----------------------------------------------------

    Event ID 1015
    Source MsiInstaller
    Type Warning
    Description Failed to connect to server. Error: 0x80080005

    I need help!!!  :-(

    Sorry but i don't understand your question: Is this box hardened?

    Thx!!!

    Jim
     



  • 4.  RE: DCOM Problem when I open Endpoint Manager

    Posted Apr 09, 2009 09:59 AM
    Hi Jim,

    Your box is a replication server?
    You already have a SEPM server installed on your network and this one is acting as a backup, seems like the IIS server installed on this server is having issues.

    You can try this for resolving the MSI issue.
    http://support.microsoft.com/default.aspx?scid=kb;en-us;319624

    You can also try to remove IIS and download and install the latest version of IIS for Windows Server 2003.  I would also suggest, installing the latest version of JRE (1.6) and SEPM 11 MR4 MP1a. 

    What version of SEPM are you running?  If it is pre MR4, what port are you running the server on?  Could possibly be a port conflict, older versions of SEPM (upgraded through time) would not be on the default port 8014 that MR 4 is using...


  • 5.  RE: DCOM Problem when I open Endpoint Manager

    Posted Apr 14, 2009 10:32 AM
    Hi Jason,

    I re-register Windows Installer (http://support.microsoft.com/default.aspx?scid=kb;en-us;319624)

    After, i did this procedure (http://support.microsoft.com/kb/899965) again and my problem was solve.

    Thanks for your help!!!

    Jim