FIX: DCOMCNFG Fails on a Backup Domain Controller (170432)



The information in this article applies to:

  • Microsoft OLE Libraries, when used with:
    • Microsoft Platform Software Development Kit (SDK) 1.0
  • the operating system: Microsoft Windows NT 4.0

This article was previously published under Q170432

SYMPTOMS

When using DComCnfg.exe to set the identity of a COM server to a specific user account on a Windows NT server that is a Backup Domain Controller(BDC), it displays an error message "Incorrect Function" or "Invalid Function". When a client attempts to launch the server, the activation fails.

CAUSE

This is caused by a bug in DCOMCNFG.EXE. DCOMCNFG tries to grant a specific right("SeBatchLogonRight") to the user account on the BDC. This is an invalid operation for a BDC because a BDC has a read-only copy of the user accounts database. Any change to the accounts database must be done on the Primary Domain Controller(PDC). Then the change is replicated to the BDC.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

152734 How to Obtain the Latest Windows NT 4.0 Service Pack


STATUS

Microsoft has confirmed this to be a bug in the Microsoft products listed at the beginning of this article. This problem was first corrected in Windows NT 4.0 Service Pack 4.0 and Windows NT Server 4.0, Terminal Server Edition Service Pack 4.

This has been fixed in Windows 2000.

Modification Type:MinorLast Reviewed:7/11/2005
Keywords:kbBug kbDCOM kbfix kbKernBase kbOSWinNT400sp4fix kbSecurity KB170432