10

Feb

2009

Permission settings do not grant Local Launch permission for the COM Server application with CLSID

Here is the typical error description:

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{0D011B6A-4BDB-49CB-8533-820B75E24DCA}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18).  This security permission can be modified using the Component Services administrative tool.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

To resolve this problem, use one of the following methods, depending on the cause of the problem.

Grant the user permissions to start the COM component

Grant the user permissions to start the COM component. To do this, follow these steps:

  1. Click Start, click Run, type regedit in the Open box, and then click OK.
  2. Locate and then click the following registry subkey:

    HKEY_CLASSES_ROOT\CLSID\CLSID value

    Note In this subkey, "CLSID value" is a placeholder for the CLSID information that appears in the message.

  3. In the right pane, double-click AppID.
    The Edit String dialog box appears. Leave this dialog box open and continue to the next step.
  4. Click Start, click Run, type dcomcnfg in the Open box, and then click OK.
    If a Windows Security Alert message prompts you to keep blocking the Microsoft Management Console program, click to unblock the program.
  5. In Component Services, double-click Component Services, double-click Computers, double-click My Computer, and then click DCOM Config.
  6. In the details pane, locate the program by using the friendly name.
    If the AppGUID identifier is listed instead of the friendly name, locate the program by using this identifier.
  7. Right-click the program, and then click Properties.
  8. Click the Security tab.
  9. In the Launch and Activation Permissions area, click Customize, and then click Edit.
  10. Click Add, type the user’s account name, and then click OK.
  11. While the user is selected, click to select the Allow check boxes for the following items:
    • Local Launch
    • Remote Launch
    • Local Activation
    • Remote Activation
  12. Click OK two times.
  13. Quit Registry Editor.
Grant the correct permissions to the Network Service account

To grant the correct permissions to the Network Service account, follow these steps:

  1. Click Start, click Run, type dcomcnfg in the Open box, and then click OK.
  2. In Component Services, double-click Component Services, and then double-click Computers.
  3. Right-click My Computer, and then click Properties.
  4. Click the COM Security tab.
  5. In the Launch and Activation Permissions area, click Edit Default.
  6. Click Add, type Network Service, and then click OK.
  7. While Network Service is selected, click to select the Allow check boxes for the following items:
    • Local Launch
    • Remote Launch
    • Local Activation
    • Remote Activation

    Click OK two times.

6 Responses

  1. Chuck M. says:

    Hello Paul,
    I used the procedure you provided to grant local launch permission for the COM server application with CLSID. It all worked fine until I attempted to grant permission to the Network Service account. The system indicated that the Network Service name was unknown. I’m using XP SP3 on a new Toshiba Satellite L-350. Please let me know how I can get around this difficulty.
    Thank you for your assistance.
    Chuck M.
    email: upatick@oh.rr.com

  2. Paul Gu says:

    Could “Network Service” account on your computer is “NETWORK” or SERIVCES”?

  3. sri says:

    pls tell me what is the friendly name.I am stuck up at step 6.How to find it

  4. Richard Torrone says:

    Thank you very much Paul.

    Rich Torrone
    2009.08.07

  5. Ole Lund Andersen says:

    Hello Paul
    I’ve got the same problem as Chuck. It all worked fine until I attempted to grant permission to the Network Service account. I don’t know how to find the Network Service name. I’m using XP SP3 on a Intellistation M Pro IBM. Please let me know how I can find this last detail.
    Thank you for your assistance.
    Kind regards
    Ole Lund Andersen

  6. Luke M says:

    What computer do you do this on? On our domain every computer that I have checked, which is about 20 computers thus far have this error with the same CLSID. Domain Controller? It seems to be a universal problem so I’m hoping there is a universal fix isntead of walking around and doing this on 55 computers.