Security Check May Break If You Change Role Policy for COM+ Application (312951)



The information in this article applies to:

  • Microsoft COM+ 1.0, when used with:
    • the operating system: Microsoft Windows 2000

This article was previously published under Q312951

SYMPTOMS

If you add a role for a COM+ application that is not running, the role base security check may break for a COM+ application that is running. Additionally, you may receive the following error message in the COM+ event log:
COM+ Security Warning
Event ID: 4098

A method call to an object in a COM+ application was rejected because the caller is not properly authorized to make this call. The COM+ application is configured to use Application and Component level access checks, and enforcement of these checks is currently enabled. The remainder of this message provides information about the component method that the caller attempted to invoke and the identity of the caller.

CAUSE

This problem occurs because the security is checked between two components in the same application. Normally, no access should be checked between components in the COM+ application.

RESOLUTION

To resolve this problem, obtain Microsoft COM+ Hotfix Rollup 18 or Windows 2000 Service Pack 3. For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

313582 INFO: Availability of Windows 2000 Post-Service Pack 2 COM+ Hotfix Rollup Package 18

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack


STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 3.

MORE INFORMATION

For additional information about how to obtain a hotfix for Windows 2000 Datacenter Server, click the article number below to view the article in the Microsoft Knowledge Base:

265173 The Datacenter Program and Windows 2000 Datacenter Server Product

For additional information about how to install multiple hotfixes with only one reboot, click the article number below to view the article in the Microsoft Knowledge Base:

296861 Use QChain.exe to Install Multiple Hotfixes with One Reboot

For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the article number below to view the article in the Microsoft Knowledge Base:

249149 Installing Microsoft Windows 2000 and Windows 2000 Hotfixes


Modification Type:MajorLast Reviewed:6/5/2003
Keywords:kbbug kbfix kbSecurity kbWin2000PreSP3Fix kbWin2000sp3fix KB312951