SQL Server – Distributed Replay Client – Error – “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6DF8CB71-153B-4C66-8FC4-E59301B8011B} and APPID {961AD749-64E9-4BD5-BCC8-ECE8BA0E241F}”

Background

As part of a MS SQL Server 2012 install that I am performing, I am reviewing the OS Event Viewer to discover and hopefully address recurrent errors.

Error Listing

In Windows Logs – System, within each minute multiple occurrences of an error with Event ID = 10016.

eventviewer-20161109-0935am

Error Message

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6DF8CB71-153B-4C66-8FC4-E59301B8011B}
and APPID
{961AD749-64E9-4BD5-BCC8-ECE8BA0E241F}
to the user NT SERVICE\SQL Server Distributed Replay Client SID (S-1-5-80-3249811479-2167633679-2115734285-1138413726-166979568) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

 

Troubleshooting

Let us match the CLSID to their Com Components.

To do so launch regedit and search for the referenced CLSID and APPLID:

  1. 6DF8CB71-153B-4C66-8FC4-E59301B8011B
  2. 961AD749-64E9-4BD5-BCC8-ECE8BA0E241F

 

Regedit

6DF8CB71-153B-4C66-8FC4-E59301B8011B

6df8cb71-153b-4c66-8fc4-e59301b8011b

 

961AD749-64E9-4BD5-BCC8-ECE8BA0E241F

961ad749-64e9-4bd5-bcc8-ece8ba0e241f

 

 

CLSID / APPLID Com Component Service
 6DF8CB71-153B-4C66-8FC4-E59301B8011B DReplayController Class
 961AD749-64E9-4BD5-BCC8-ECE8BA0E241F DReplayController  SQL Server Distributed Replay Controller

 

 

Remediate

Component Services

  1. Launch Administrative Tools \ Component Services
  2. Navigate to DCOM Config node
  3. Look for DReplay Controller
    • Select that node
    • Right click on your selection and choose Properties from the drop-down menu
    • Tab – General
      • Review the General Tab and ensure you have chosen to review\configure the right component
    • Tab – Security
      • Make your way to the Security Tab
      • Within the “Launch and Activation Permissions” group box, ensure that Customize is chosen and click the Edit button

DReplayController

DReplayController – General

tab-general

DReplayController – Security

tab-security

DReplayController – Security – Launch and Activation Permission ( Post Install )

tab-security-launchandactivationpermission-20161109-0824am-brushed-up

 

Explanation
  1. The only account that is currently able to Activate the component is I, the installer.

 

DReplayController – Security – Launch and Activation Permission ( Post Install – Customization – Select Users or Groups)

selectusersandgroups-20161109-0925am-brushedup

 

DReplayController – Security – Launch and Activation Permission ( Post Install – Customization – Local and Activation Permission )

 

tab-security-launchandactivationpermission-20161109-0928am-brushed-up

Explanation
  1. Grant our noted service Account (“NT SERVICE\SQL Server Distributed Replay Client“) local activation permission

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s