The application-specific permission settings do not grant Local Activation permission

iis gpo
George Murphy picture George Murphy · Nov 3, 2020 · Viewed 15.9k times · Source

A colleague of mine suggested that I could fix this error in the GPO. It is a windows 2016 server.

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Answer

Bruce Zhang picture Bruce Zhang · Nov 4, 2020

I’m not sure if this issue affects the functionality of your app, as it is mentioned in docuemnt, you don't need to fixed it if it has no effect on function.

These events can be safely ignored because they do not adversely affect functionality and are by design. This is the recommend action for these events.

If it has effect on application, you can follow these steps to fix it.

  1. Open the registry editor as an administrator and nagvigate to HKEY_CLASSES_ROOT\CLSID{D63B10C5-BB46-4990-A94F-E40B9D520160}. If you are in the right location, you also see the APPID as a value. Remember the application name, you can see in the Data column, the corresponding Name column shows (Default).
  2. Right click the {D63B10C5-BB46-4990-A94F-E40B9D520160} and click Permissions, then choose Advanced.
  3. In the advance security setting window, click Change and type your administrator account. Then click OK.
  4. In the "Permissions for..." windows, select the Administrators and activate the Full Permissions checkbox.
  5. Repeat step 1 to 4 to configurate APPID{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}.
  6. Open Component Services as administrator. Navigate to Component Services-Computers-My Computer-DCOM Config.Find the application by application name remembered in step 1 and right click the Properties.
  7. Go to tab Security, choose the apropiate action. You can choose Launch and Activation Permissions set to Customize and Edit.
  8. Click the name that applies to you and click the appropriate permission.

Related questions

Config Error: This configuration section cannot be used at this path

I've encountered an error deploying a site to a server. When trying to load the home page, or access authentication on the new site in IIS, I get the error: Config Error: This configuration section cannot be used at this …

Read More
How to create .pfx file from certificate and private key?

I need .pfx file to install https on website on IIS. I have two separate files: certificate (.cer or pem) and private key (.crt) but IIS accepts only .pfx files. I obviously installed certificate and it is available in certificate …

Read More
HTTP Error 503, the service is unavailable

I'm really new to setting up web servers in general. I've got IIS 8 on Windows 8, and I'm trying to set up a little site locally, while doing some development. In IIS I choose Add Site, give a name, points to …

Read More