COM+-related events may be logged in Event Viewer when you install Windows XP Service Pack 2 and join the computer to a domain (916254)



The information in this article applies to:

  • Microsoft Windows XP Professional
  • Microsoft Windows XP Home Edition

SYMPTOMS

When you install Microsoft Windows XP Service Pack 2 (SP2) on the computer, and then join the computer to a domain, the following COM+-related events may be logged in Event Viewer:Event ID: 7031
Event Source: Service Control Manager
Description: The COM+ System Application service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. Event ID: 4609
Event Source: Event System
Description: The COM+ Event System detected a bad return code during its internal processing. HRESULT was 80070005 from line 44 of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error. Event ID: 4689
Event Source: COM+
Description: The run-time environment has detected an inconsistency in its internal state. This indicates a potential instability in the process that could be caused by the custom components running in the COM+ application, the components they make use of, or other factors. Error in d:\qxp_slp\com\com1x\src\comsvcs\events\lcedisp.cpp(129), hr = 80040206: Failed to CoCreate EventSystem object. Event ID: 4455
Event Source: COM+
Description: Failed to create event class. Please check the event log for any other errors from the EventSystem.CLSID_ComServiceEvents

Server Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}
Server Application Instance ID: {3ACAFEF6-6926-45F7-A453-5F13E96418DE}
Server Application Name: System Application
Error Code = 0x80040154 : Class not registered
COM+ Services Internals Information:
File: d:\qxp_slp\com\com1x\src\comsvcs\events\lcedisp.cpp, Line: 701
Comsvcs.dll file version: ENU 2001.12.4414.258 shp. Event ID: 4156
Event Source: COM+
Description: String Message: First attempt to CoCreateInstance(CLSID_ComSystemAppEventData) failed! Event ID: 4822
Event Source: COM+
Description: A condition has occurred that indicates this COM+ application is in an unstable state or is not functioning correctly. Assertion Failure: SUCCEEDED(hr)

Server Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}
Server Application Instance ID: {3ACAFEF6-6926-45F7-A453-5F13E96418DE}
Server Application Name: System Application
The serious nature of this error has caused the process to terminate.
Error Code = 0x8000ffff : Catastrophic failure
COM+ Services Internals Information:
File: d:\qxp_slp\com\com1x\src\comsvcs\tracker\trksvr\trksvrimpl.cpp, Line: 3000
Comsvcs.dll file version: ENU 2001.12.4414.258 shp Event ID: 8193
Event Source: VSS
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80040206. Event ID: 4442
Event Source: COM+
Description: A log information record was not found in the existing CRM log file. It has been added. If this warning appears when the CRM log file is being initially created then no further action is required.

Server Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}
Server Application Instance ID: {D4C1067D-E53E-4197-A93E-268A767AE177}
Server Application Name: System Application
Comsvcs.dll file version: ENU 2001.12.4414.258 shp Additionally, you may experience one or more of the following symptoms:
  • When you expand a computer node in the Component Services Microsoft Management Console (MMC) snap-in, the node closes automatically.
  • You cannot start the COM+ System Application service on the local computer. Additionally, you receive an error message that is similar to the following:
    Could not start the COM+ System Application service on Local Computer. Error 1067: The process terminated correctly.
  • When you click the Dependency tab in the COM+ System Application service or in any other service, you receive an error message that is similar to the following:
    Win32: Access is denied


Note This issue does not occur if one of the following conditions is true:
  • You join the computer to the domain before you install Windows XP SP2 on the computer.
  • You install Windows XP SP2 on the computer, but you do not join the computer to the domain.

RESOLUTION

To resolve this issue, add the service account to the "Impersonate a client after authentication" domain policy. To do this, follow these steps:
  1. Click Start, click Run, type secpol.msc, and then click OK.
  2. In the left pane, expand Local Policies, and then click User Rights Assignment.
  3. In the right pane, double-click Impersonate a client after authentication.
  4. Click Add User or Group.
  5. Type service in the Enter the object names to select box, and then click OK two times.
  6. Restart the computer.

MORE INFORMATION

Windows XP SP2 fully enforces the following user rights:
  • SeImpersonatePrivilege
  • SeCreateGlobalPrivilege

Modification Type:MinorLast Reviewed:4/7/2006
Keywords:kbtshoot KB916254 kbAudITPRO