| Event Id | 10002 |
| Source | DCOM |
| Description | Access denied attempting to launch a DCOM Server. The server is:%1The user is %2/%3, SID=%4. |
| Event Information | According to Microsoft : Cause : A program, the Clsid displayed in the message, tried to start the DCOM server by using the DCOM infrastructure. Based on the security ID (SID), this user does not have the necessary permissions to start the DCOM server. Resolution : Verify that the user has the appropriate permissions to start the DCOM server. To assign permissions 1. Using Regedit, navigate to the following registry value HKCR\Clsid\clsid value\localserver32 The clsid value is the information displayed in the message. 2.In the right pane, double-click Default.The Edit Stringdialog box is displayed. Leave this dialog box open. 3.ClickStartand then click Control Panel. 4.Double-clickAdministrative Tools and then double-clickComponent Services. 5.In the Component Services snap-in, navigate to Computers\My Computer\DCOM Config. 6.In the right pane, locate the program by using its friendly name. 7.Right-click the program name and then select Properties. 8.On theSecurity tab, select Customizeand then clickEdit. 9.Add the user to the permissions list. |
| Reference Links | Event ID 10002 from Source DCOM |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.