| Event Id | 10002 |
| Source | DCOM |
| Description | Access denied attempting to launch a DCOM Server. The server is:1% The user is %2/%3, SID=%4. |
| Event Information | According to Microsoft : Cause : A program, the Clsid displayed in the message, tried to start the DCOM server by using the DCOM infrastructure. Based on the security ID (SID), this user does not have the necessary permissions to start the DCOM server. Resolution : Verify that the user has the appropriate permissions to start the DCOM server. To assign permissions 1.Using Regedit, navigate to the following registry value HKCR\Clsid\clsid value\localserver32 The clsid value is the information displayed in the message. 2.In the right pane, double-click Default.The Edit String dialog box is displayed. Leave this dialog box open. 3.Click Start, and then click Control Panel 4.Double-click Administrative Tools and then double-click Component Services. 5.In the Component Servicessnap-in, navigate to Computers\My Computer\DCOM Config. 6.In the right pane, locate the program by using its friendly name. 7.Right-click the program name and then select Properties. 8.On the Security tab, select Customize, and then click Edit. 9.Add the user to the permissions list. |
| Reference Links | Event ID 10002 From Source DCOM |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.