Event ID 10016 when scheduling MIIS run sequence

One of the options to schedule MIIS runs is using the Management Agent Run Sequence Configuration and the masequencer tool.

While scheduling the task in the Scheduled Tasks (Control Panel), you could run into an error:

service+error

Source: DCOM

Category: None

Type: Error

Event ID: 10016

Description:

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{835BEE60-8731-4159-8BFF-941301D76D05}

to the user SERVER\svc_miis SID (S-1-5-21-1833440622-3177292017-1074289345-1020). This security permission can be modified using the Component Services administrative tool.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Searching the registry for the CLSID (in this case {835BEE60-8731-4159-8BFF-941301D76D05}), you should find Microsoft Metadirectory Services.

regedit

Next open the Component Services (Start > Programs > Administrative Tools > Component Services)

componentservices

Select Component Services > Computers > My Computer > DCOM Config branch.

Open the properties of the Microsoft Metadirectory Services.

Make sure that the service account used for starting the tasks has the proper rights (Local Activation permission), as requested.

Like

localactivation

If you use the principle of least privilege, you might consider using a service account without administrative rights.
In that case you need to add that account to the list displayed.

Additional information:

Event ID 10016 may be logged in the System log on a computer that is running Windows Server 2003 with Service Pack 1

http://support.microsoft.com/kb/931355

[EDIT]

In the Component services console, you might encounter that the security options are greyed out…

Here’s the solution to fix this quickly: http://blogs.msdn.com/b/emeadaxsupport/archive/2010/01/26/unable-to-edit-the-dcom-settings-for-iis-wamreg-admin-service-on-a-windows-server-2008-r2-when-trying-to-configure-kerberos-authentication-for-role-centers.aspx

Advertisements

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s