PRB: EventID 4098 appears while posting message to a workflow-enabled folder (297508)


The information in this article applies to:

  • Microsoft Exchange 2000 Server
This article was previously published under Q297508

SYMPTOMS

When you post a message to a workflow-enabled public folder, the following event may be logged in the Windows Event Viewer:
Event Type: Warning
Event Source: COM+
Event Category: Security
Event ID: 4098

Description:
A method call to an object in a COM+ application was rejected because the caller is not properly authorized to make this call. The COM+ application is configured to use Application and Component level access checks, and enforcement of these checks is currently enabled. The remainder of this message provides information about the component method that the caller attempted to invoke and the identity of the caller.

Destination of the rejected call:

Application Id: {BC271369-5F34-414C-8C01-89DD4356FC36}
CLSID: {CD002002-8B95-11D1-82DB-00C04FB1625D}
IID: {9DA0E101-86CE-11D1-8699-00C04FB98036}
Method #: 3
Class: CdoWfEvt.EventSink.1
Interface: IExStoreSystemEvents
Method: OnTimer
Although an error is logged, the post is successful. However, it is not processed by the workflow process because it is not in a workflow state.

CAUSE

The NT Authority\SYSTEM account is missing from the Privileged Workflow Authors role on the server. Exchange Server services run as the Local System Account (NT Authority\System), and the identity of the OnTimer call to your workflow event sink is "Local system".

RESOLUTION

To resolve this problem, add the NT Authority\SYSTEM account to the Priviliged Workflow Authors role.

MORE INFORMATION

To download Workflow Designer for Exchange, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=B0DBF355-D619-491F-86B6-082C83642CB3

To add the NT Authority\System account, follow these steps:
  1. Click Start, point to Programs, point to Administrative Tools, and then click Component Services.
  2. In the Component Services dialog box, click Component Services, click Computers, and then click My Computer.
  3. Click COM+ Applications, click Workflow Event Sink, and then click Roles.
  4. Click Privileged Workflow Authors, and then click Users.
  5. Right-click Users, point to New, and then click User to add the NT Authority\SYSTEM account.
Modification Type:MajorLast Reviewed:7/16/2004
Keywords:kbMsg kbprb KB297508
©2004 Microsoft Corporation. All rights reserved.