locked
Server operations out the window RRS feed

  • Question

  • After a recent removal of SQL 2008 to install SQL 2008 R2 on a server, things went haywire.  First off I have the following errors and warning popping up all the time:

    Log Name:      System
    Source:        Microsoft-Windows-DistributedCOM
    Date:          5/25/2010 12:51:56 AM
    Event ID:      10016
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          MRM2INC\SharePointDBA
    Computer:      SERVER4.MRM2Inc.com
    Description:
    The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {61738644-F196-11D0-9953-00C04FD919C1}
     and APPID
    {61738644-F196-11D0-9953-00C04FD919C1}
     to the user MRM2INC\SharePointDBA SID (S-1-5-21-3670036462-2345961193-710318829-1196) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
        <EventID Qualifiers="49152">10016</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2010-05-25T04:51:56.000000000Z" />
        <EventRecordID>37502</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>System</Channel>
        <Computer>SERVER4.MRM2Inc.com</Computer>
        <Security UserID="S-1-5-21-3670036462-2345961193-710318829-1196" />
      </System>
      <EventData>
        <Data Name="param1">application-specific</Data>
        <Data Name="param2">Local</Data>
        <Data Name="param3">Activation</Data>
        <Data Name="param4">{61738644-F196-11D0-9953-00C04FD919C1}</Data>
        <Data Name="param5">{61738644-F196-11D0-9953-00C04FD919C1}</Data>
        <Data Name="param6">MRM2INC</Data>
        <Data Name="param7">SharePointDBA</Data>
        <Data Name="param8">S-1-5-21-3670036462-2345961193-710318829-1196</Data>
        <Data Name="param9">LocalHost (Using LRPC)</Data>
      </EventData>
    </Event>

    Log Name:      Application
    Source:        MsiInstaller
    Date:          5/25/2010 12:51:47 AM
    Event ID:      1015
    Task Category: None
    Level:         Warning
    Keywords:      Classic
    User:          MRM2INC\SharePointDBA
    Computer:      SERVER4.MRM2Inc.com
    Description:
    Failed to connect to server. Error: 0x80070005
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MsiInstaller" />
        <EventID Qualifiers="0">1015</EventID>
        <Level>3</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2010-05-25T04:51:47.000000000Z" />
        <EventRecordID>258167</EventRecordID>
        <Channel>Application</Channel>
        <Computer>SERVER4.MRM2Inc.com</Computer>
        <Security UserID="S-1-5-21-3670036462-2345961193-710318829-1196" />
      </System>
      <EventData>
        <Data>0x80070005</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>
        </Data>
      </EventData>
    </Event>

    I know these both center around the same account, but I am unable to figure out the exact problem.  As for security reasons and errors that showed with the health monitor in SharePoint 2010, the SharePointDBA account was removed from the computers administrators after the installation of the Sharepoint farm.  Since then I have been getting these messages constantly.

    Now to the bigger problem of accounts being unable to log on.  After I had installed SQL 2008 R2 via the Administrator account, we tried to log the sharepoint administrator on to install Sharepoint farm components. 

    This resulted in the following message:

    The User Profile Service service failed the logon.

    User profile cannot be loaded.

    Being that this was being tried via RDP we went to the Hyper-V Manager and tried to log on again and were greeted with the same message.

    Checking the event log gave me the following:

    Log Name:      Application
    Source:        Microsoft-Windows-User Profiles Service
    Date:          5/25/2010 8:07:19 AM
    Event ID:      1500
    Task Category: None
    Level:         Error
    Keywords:     
    User:          MRM2INC\SharePointCAA
    Computer:      SERVER4.MRM2Inc.com
    Description:
    Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.

     DETAIL - Only part of a ReadProcessMemory or WriteProcessMemory request was completed.

    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
        <EventID>1500</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2010-05-25T12:07:19.450492800Z" />
        <EventRecordID>258279</EventRecordID>
        <Correlation />
        <Execution ProcessID="872" ThreadID="14428" />
        <Channel>Application</Channel>
        <Computer>SERVER4.MRM2Inc.com</Computer>
        <Security UserID="S-1-5-21-3670036462-2345961193-710318829-1197" />
      </System>
      <EventData>
        <Data Name="Error">Only part of a ReadProcessMemory or WriteProcessMemory request was completed.
    </Data>
      </EventData>
    </Event>

    and

    Log Name:      Application
    Source:        Microsoft-Windows-User Profiles Service
    Date:          5/25/2010 8:07:18 AM
    Event ID:      1511
    Task Category: None
    Level:         Error
    Keywords:     
    User:          MRM2INC\SharePointCAA
    Computer:      SERVER4.MRM2Inc.com
    Description:
    Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
        <EventID>1511</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2010-05-25T12:07:18.635720700Z" />
        <EventRecordID>258276</EventRecordID>
        <Correlation />
        <Execution ProcessID="872" ThreadID="14428" />
        <Channel>Application</Channel>
        <Computer>SERVER4.MRM2Inc.com</Computer>
        <Security UserID="S-1-5-21-3670036462-2345961193-710318829-1197" />
      </System>
      <EventData>
      </EventData>
    </Event>

    and

    Log Name:      Application
    Source:        Microsoft-Windows-User Profiles General
    Date:          5/25/2010 8:07:18 AM
    Event ID:      1509
    Task Category: None
    Level:         Warning
    Keywords:     
    User:          MRM2INC\SharePointCAA
    Computer:      SERVER4.MRM2Inc.com
    Description:
    Windows cannot copy file C:\Users\Default\AppData\Local\Microsoft\Exchange Server\V14\CmdletSqmData6168_100.sqm to location C:\Users\SharePointCAA\AppData\Local\Microsoft\Exchange Server\V14\CmdletSqmData6168_100.sqm. This error may be caused by network problems or insufficient security rights.

     DETAIL - Access is denied.

    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-User Profiles General" Guid="{DB00DFB6-29F9-4A9C-9B3B-1F4F9E7D9770}" />
        <EventID>1509</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2010-05-25T12:07:18.287038800Z" />
        <EventRecordID>258275</EventRecordID>
        <Correlation />
        <Execution ProcessID="872" ThreadID="4776" />
        <Channel>Application</Channel>
        <Computer>SERVER4.MRM2Inc.com</Computer>
        <Security UserID="S-1-5-21-3670036462-2345961193-710318829-1197" />
      </System>
      <EventData Name="EVENT_COPYERROR">
        <Data Name="Source">C:\Users\Default\AppData\Local\Microsoft\Exchange Server\V14\CmdletSqmData6168_100.sqm</Data>
        <Data Name="Target">C:\Users\SharePointCAA\AppData\Local\Microsoft\Exchange Server\V14\CmdletSqmData6168_100.sqm</Data>
        <Data Name="Error">Access is denied.
    </Data>
      </EventData>
    </Event>

    no dice on it logging on with a temporary profile either since it shuts out the logon.  I then noticed that the account being used for the IIS application pool was having the same problems.  How do I go about fixing these problems?

     


    Michael R. Mastro II
    Tuesday, May 25, 2010 12:14 PM

All replies

  • Hi,

    Regarding SharePointCAA, please try the following fix:

    Error message when you log on to a Windows Vista-based or Windows 7-based computer by using a temporary profile: "The User Profile Service failed the logon. User profile cannot be loaded"
    http://support.microsoft.com/kb/947215

    Regarding SharePointDBA, SharePoint may require this account to be an administrator, could you add it back to the administrator group to test?

    Thanks.


    This posting is provided "AS IS" with no warranties, and confers no rights.
    Friday, May 28, 2010 11:54 AM
  • Hello,

     

    I followed the information listed in the KB.  The SharePointCAA does not show up in the User Profiles from Computer Properties, nore does it show up in the ProfileList in HKLM\Software\Microsoft\Windows NT\Current Version.  Is there another way to take this a step further to resolve the issue?  I also added the SharePointDBA account to the Administrators group, will see what happens with that issue.

     

    Thanks.


    Michael R. Mastro II
    Saturday, May 29, 2010 11:16 AM
  • An update.  After 24 hours, I have reviewed the event log again, even with the SharepointDBA account in the Administrator's group I am still receivng the DCOM and Windows Installer errors.  Plus SharePoint start throwing the flag that my farm account is in the administrator's group.  So as that did nothing to fix the issue, should I remove it from there?
    Michael R. Mastro II
    Sunday, May 30, 2010 11:03 AM
  • We observed the same errors as described above after a) upgrading SQL 2008 to SQL 2008 R2 and b) installing SP 2010 when one of the Exchange 2010 Org Admins tried to log on to the Exchange 2010 MB role server. He is able to log on to the CAS/HT role system, though.

    Is there any solution to this?

    Thanks,

    Markus Ruppel

     

    Thursday, June 24, 2010 2:24 PM
  • No one has gotten back to me on this.  Though it seems strangely similar to what I had done on the machine.  I had uninstalled SQL 2008 then installed SQL 2008 R2, and after that installed SharePoint 2010 WFE.  Of course I was unable to log anyone on except the Administrator after uninstalling SQL 2008.
    Michael R. Mastro II
    Thursday, June 24, 2010 9:43 PM