Access Denied to COM Security using Admin Account

[Guest Asad Malik]

Hello, I was hardening the security of my windows server and i read the

document about MSDTC that if you don't need it then disable. And this is

exactly what I did. I stopped and disabled MSDTC service. And then i removed

Anonymous Logon & Everyone permisson (Local Access & Remote Access) under

component service for COM security.

 

I restarted the server, logged in as Administrator and got access denied to

most of the tasks such as creating users or adding users to group. The worst

thing is that i can't even Right-Click on any object to check the properties.

I tried to bring back the permission on the COM security but failed as I’m

getting access denied though I’m logged in as administrator. Tried to restart

MSDTC service but unsuccessful because i can't even right-Click on it.

 

The event log is showing the following error. I can't read the detail

message since right-click is not working. so I’m posting the basic errors.

 

System Logs:

 

LsaSrv --> Event ID 40960

Datascrn--> Event ID 3

 

Application Logs:

 

SRMSVC--> Event ID 8203

USERENV--> Event ID 1110

USERENV--> Event ID1090

ccsetmgr--> Event ID 48

Event System--> Event ID 4609

COM+ --> Event ID 4691

 

Does any one know how can i reset the COM Security permission and restart

the MSDTC service? Any suggestions will be appreciated.

 

Thanks

[Guest Meinolf Weber]

Re: Access Denied to COM Security using Admin Account

 

Hello Asad,

 

If you have a system state backup you are lucky, otherwise....

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hello, I was hardening the security of my windows server and i read

> the document about MSDTC that if you don't need it then disable. And

> this is exactly what I did. I stopped and disabled MSDTC service. And

> then i removed Anonymous Logon & Everyone permisson (Local Access &

> Remote Access) under component service for COM security.

>

> I restarted the server, logged in as Administrator and got access

> denied to most of the tasks such as creating users or adding users to

> group. The worst thing is that i can't even Right-Click on any object

> to check the properties. I tried to bring back the permission on the

> COM security but failed as I'm getting access denied though I'm logged

> in as administrator. Tried to restart MSDTC service but unsuccessful

> because i can't even right-Click on it.

>

> The event log is showing the following error. I can't read the detail

> message since right-click is not working. so I'm posting the basic

> errors.

>

> System Logs:

>

> LsaSrv --> Event ID 40960

> Datascrn--> Event ID 3

> Application Logs:

>

> SRMSVC--> Event ID 8203

> USERENV--> Event ID 1110

> USERENV--> Event ID1090

> ccsetmgr--> Event ID 48

> Event System--> Event ID 4609

> COM+ --> Event ID 4691

> Does any one know how can i reset the COM Security permission and

> restart the MSDTC service? Any suggestions will be appreciated.

>

> Thanks

>