none
MsiInstaller Warnings and DistributedCOM Errors in the Event Log after configuring User Profile

    Question

  • Ok, this is my second installation of the beta and I have seen the same things both times.

    After the Sharepoint Products Configuration Wizard completes, I launch the setup wizard from Central Administration. During this phase I find this error in the event log:

    Application Error Event ID: 3 Source: Forefront Identity Manager
    Description: Microsoft.ResourceManagement.Service: System.ArgumentException: Unable to open database connection Parameter name: connectionString ---> System.Transactions.TransactionManagerCommunicationException: Network access for Distributed Transaction Manager (MSDTC) has been disabled. Please enable DTC for network access in the security configuration for MSDTC using the Component Services Administrative tool.


    So I went into Component Services and enabled DTC for network access as described here: http://technet.microsoft.com/en-us/library/cc753510(WS.10).aspx

    No errors from the Configuration Wizard itself, everything runs along normally. So I start the User Profile Synchronization Service, and then I start getting these error messages:

    Log Name:      Application
    Source:        MsiInstaller
    Date:          11/23/2009 3:47:44 PM
    Event ID:      1004
    Task Category: None
    Level:         Warning
    Keywords:      Classic
    User:          NETWORK SERVICE
    Computer:      BGBSPS1.bg.brasfieldgorrie.com
    Description:
    Detection of product '{20140000-104C-0000-1000-0000000FF1CE}', feature 'PeopleILM', component '{1C12B6E6-898C-4D58-9774-AAAFBDFE273C}' failed.  The resource 'C:\Program Files\Microsoft Office Servers\14.0\Service\Microsoft.ResourceManagement.Service.exe' does not exist.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MsiInstaller" />
        <EventID Qualifiers="0">1004</EventID>
        <Level>3</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2009-11-23T21:47:44.000Z" />
        <EventRecordID>866</EventRecordID>
        <Channel>Application</Channel>
        <Computer>BGBSPS1.bg.brasfieldgorrie.com</Computer>
        <Security UserID="S-1-5-20" />
      </System>
      <EventData>
        <Data>{20140000-104C-0000-1000-0000000FF1CE}</Data>
        <Data>PeopleILM</Data>
        <Data>{1C12B6E6-898C-4D58-9774-AAAFBDFE273C}</Data>
        <Data>C:\Program Files\Microsoft Office Servers\14.0\Service\Microsoft.ResourceManagement.Service.exe</Data>
        <Data>(NULL)</Data>
        <Data>
        </Data>
        <Data>
        </Data>
      </EventData>
    </Event>

    and....

    Log Name:      Application
    Source:        MsiInstaller
    Date:          11/23/2009 3:47:44 PM
    Event ID:      1001
    Task Category: None
    Level:         Warning
    Keywords:      Classic
    User:          NETWORK SERVICE
    Computer:      BGBSPS1.bg.brasfieldgorrie.com
    Description:
    Detection of product '{20140000-104C-0000-1000-0000000FF1CE}', feature 'PeopleILM' failed during request for component '{9AE4D8E0-D3F6-47A8-8FAE-38496FE32FF5}'
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MsiInstaller" />
        <EventID Qualifiers="0">1001</EventID>
        <Level>3</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2009-11-23T21:47:44.000Z" />
        <EventRecordID>867</EventRecordID>
        <Channel>Application</Channel>
        <Computer>BGBSPS1.bg.brasfieldgorrie.com</Computer>
        <Security UserID="S-1-5-20" />
      </System>
      <EventData>
        <Data>{20140000-104C-0000-1000-0000000FF1CE}</Data>
        <Data>PeopleILM</Data>
        <Data>{9AE4D8E0-D3F6-47A8-8FAE-38496FE32FF5}</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>
        </Data>
        <Data>
        </Data>
      </EventData>
    </Event>

    and...

    Log Name:      Application
    Source:        MsiInstaller
    Date:          11/23/2009 3:47:44 PM
    Event ID:      1015
    Task Category: None
    Level:         Warning
    Keywords:      Classic
    User:          NETWORK SERVICE
    Computer:      BGBSPS1.bg.brasfieldgorrie.com
    Description:
    Failed to connect to server. Error: 0x80070005
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MsiInstaller" />
        <EventID Qualifiers="0">1015</EventID>
        <Level>3</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2009-11-23T21:47:44.000Z" />
        <EventRecordID>868</EventRecordID>
        <Channel>Application</Channel>
        <Computer>BGBSPS1.bg.brasfieldgorrie.com</Computer>
        <Security UserID="S-1-5-20" />
      </System>
      <EventData>
        <Data>0x80070005</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>
        </Data>
        <Data>
        </Data>
      </EventData>
    </Event>


    Then, if I check the system log, I have this error message repeating a few times:
    Log Name:      System
    Source:        Microsoft-Windows-DistributedCOM
    Date:          11/23/2009 4:04:03 PM
    Event ID:      10016
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          NETWORK SERVICE
    Computer:      BGBSPS1.bg.brasfieldgorrie.com
    Description:
    The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {000C101C-0000-0000-C000-000000000046}
     to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
        <EventID Qualifiers="49152">10016</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2009-11-23T22:04:03.000Z" />
        <EventRecordID>26623</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>System</Channel>
        <Computer>BGBSPS1.bg.brasfieldgorrie.com</Computer>
        <Security UserID="S-1-5-20" />
      </System>
      <EventData>
        <Data Name="param1">machine-default</Data>
        <Data Name="param2">Local</Data>
        <Data Name="param3">Activation</Data>
        <Data Name="param4">{000C101C-0000-0000-C000-000000000046}</Data>
        <Data Name="param5">NT AUTHORITY</Data>
        <Data Name="param6">NETWORK SERVICE</Data>
        <Data Name="param7">S-1-5-20</Data>
        <Data Name="param8">LocalHost (Using LRPC)</Data>
      </EventData>
    </Event>

    Like I said before, it looks like everything is working, I got the profile to sync, but I don't get a warm fuzzy feeling from this. I am running on Windows Server 2008, separate SQL server running 2008 x64 SP1 with Cumulative Update 2. I ran the hotfix for WCF ahead of time, and the service account is a domain admin. Is anyone else seeing these error messages?


    Monday, November 23, 2009 10:20 PM

All replies

  • Hi Ricky. Same experience here and the same unfuzzy feeling. I also got to the point where I was looking for more information about the DTC configuration recommended settings. I'm on Windows Server 2008 R2 with stand-alone SharePoint on one box, SQL 2008 SP1 + CU2 on the other box. This is in a domain and I get the same set of errors. The way I'm reading this, the DCOM 10016 error suggests that we need to grant Local Activation rights to something (I assume the SharePoint User Profile Service Application account). I'm going to give that a try tomorrow.

    Interestingly, two of the errors relate to the {1C12B6E6-898C-4D58-9774-AAAFBDFE273C} component, which fails because it doesn't exist?!?! I guess either that's a beta bug or that maybe MSIExec is trying to install it and fails because it doesn't have Local Avtivation rights??? I can't find any information about what {1681AE41-ADA8-4B70-BC11-98A5A4EDD046} is.

    The only mention I can find about {9AE4D8E0-D3F6-47A8-8FAE-38496FE32FF5} is over here: http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/e6e10fa2-b18f-4d69-af4c-49246aa95733 and http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/e6e10fa2-b18f-4d69-af4c-49246aa95733. This suggests that the User Profile service account needs to become a member of three local ILM groups. These groups have changed to become FIM local groups in 2010. All four of my FIM groups are empty. Since the User Profile configuration is a bit of a black box according to the recommended configuration, I'm assuming we need to add the service application to these groups. If not, why do the groups exist? I've added my service appllication account to these groups and reset the FIM services but it still didn't make any difference. I still get the same errors.

    I'm guessing the next step must be granting Local Activation rights to one or more of these local FIM groups but I can't find out what {9AE4D8E0-D3F6-47A8-8FAE-38496FE32FF5} is so I'm not sure where to enable that. Unfortunately I need to leave the office now, but maybe this can be a helpful start for someone who has a bit more time to look at this than I do.

    Note: this is also being tracked on MSDN. http://social.msdn.microsoft.com/Forums/en/sharepoint2010general/thread/950902d4-9755-4568-acd6-3edb36fb6676
    • Proposed as answer by Corey Clamp Wednesday, May 26, 2010 3:05 AM
    Wednesday, December 02, 2009 7:08 PM
  • Thanks Tristan. I was unaware of the four FIMSync local groups. I am going to assume the errors can be ignored for now. Here is what I posted on the MSDN site you linked to:

    Since the beta release I have done two Sharepoint 2010 installs on Windows Server 2008, and one on Windows Server 2010 R2.

    On all of the installations, if I followed all of the recommendations that others have posted, I was able to get the profile sync to work but I still had the error messages. To summarize, these are the errors I get, both during initial sync and on a regular schedule afterwards:

    Application Log

    Event ID

    Source

    Description

    1004

    MsiInstaller

    Detection of product '{20140000-104C-0000-1000-0000000FF1CE}', feature 'PeopleILM', component '{1C12B6E6-898C-4D58-9774-AAAFBDFE273C}' failed.  The resource 'C:\Program Files\Microsoft Office Servers\14.0\Service\Microsoft.ResourceManagement.Service.exe' does not exist.

    1001

    MsiInstaller

    Detection of product '{20140000-104C-0000-1000-0000000FF1CE}', feature 'PeopleILM' failed during request for component '{9AE4D8E0-D3F6-47A8-8FAE-38496FE32FF5}'

    1015

    MsiInstaller

    Failed to connect to server. Error: 0x80070005

    1004

    MsiInstaller

    Detection of product '{20140000-104C-0000-1000-0000000FF1CE}', feature 'PeopleILM', component '{1C12B6E6-898C-4D58-9774-AAAFBDFE273C}' failed.  The resource 'C:\Program Files\Microsoft Office Servers\14.0\Service\Microsoft.ResourceManagement.Service.exe' does not exist.

    1001

    MsiInstaller

    Detection of product '{20140000-104C-0000-1000-0000000FF1CE}', feature 'PeopleILM' failed during request for component '{1681AE41-ADA8-4B70-BC11-98A5A4EDD046}'

    1015

    MsiInstaller

    Failed to connect to server. Error: 0x80070005


    System Log

    Event ID

    Source

    Description

    10016

    DistributedCOM

    The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID

    {000C101C-0000-0000-C000-000000000046}

     and APPID

    {000C101C-0000-0000-C000-000000000046}

     to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

    10016

    DistributedCOM

    The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID

    {000C101C-0000-0000-C000-000000000046}

     and APPID

    {000C101C-0000-0000-C000-000000000046}

     to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.



    On the first install, I granted local activation rights to Network Service for Windows Installer ({000C101C-0000-0000-C000-000000000046}) and kicked off a sync, and I got several messages about a successful install. However, soon after this, the Forefront service stopped, and would not restart. So I my third install I just ignored the errors. Everything seems to be working, and I have setup "my sites" successfully, and a user can edit their profile. So I am going to assume these are harmless errors until I hear otherwise.

    Wednesday, December 02, 2009 7:57 PM
  • Nice one Ricky. I'll take the conversation back over there myself actually, since there's already been a fair amount of discussion about this on MSDN.
    Wednesday, December 02, 2009 10:41 PM
  •  

    I get the same errors. Have you been able to resolve these?


    Regards

    Monday, May 31, 2010 6:39 AM
  • Hi,

    I have SHarepoint 2010 RTM version and exactly the same errors... ¿Any new?

    Thanks

    Thursday, June 03, 2010 11:20 AM
  • Carmen, I was getting that error too on a new Sharepoint 2010 installation. I think I have resolved it by following the procedure detailed on Matt Grove's blog which successfully resolved a similar 10016 DCOM problem with the SP2010 system: http://www.mattgrovesblog.com/2009/10/dcom-error-10016-with-sharepoint-2010.html

    Simply follow his procedure, but look for {000C101C-0000-0000-C000-000000000046} as the CLSID/AppID. Also, in Component Services, the service is listed as "{000C101C-0000-0000-C000-000000000046}" rather than as a textual name.

     

    Friday, June 11, 2010 3:38 PM
  • Ok, I´ll try it.

    Thanks a lot!!!

    Monday, June 14, 2010 8:38 PM
  • Hello

     

    you can solve it by following this post

    http://blog.hametbenoit.info/Lists/Posts/Post.aspx?ID=159


    Senior Solution Architect Capgemini
    Monday, January 03, 2011 8:07 PM
  • Great! :) It's working now :) Thank You.
    Tuesday, February 01, 2011 2:27 PM
  • That blog seems to only solve one of the many event id errors outlined in this thread.  What about event id 1015?

     

     


    Steve Reardon
    Monday, March 07, 2011 5:41 PM
  • I have had these errors too on my SharePoint Farm. I looked at the article in http://blog.hametbenoit.info/Lists/Posts/Post.aspx?ID=159 but I was not comfortable with granting "Full Control" permissions on this folder.

    I have solved these messages (1001, 1004 and 1015) by granting MODIFY permissions to "Network Service" on the following two folders:

    - C:\Program Files\Microsoft Office Servers\14.0\Service

    - C:\Program Files\Microsoft Office Servers\14.0\Sql

    Just to be a little bit more secure...


    MdeB - Microsoft Partner - MCITP & Computer Enthousiast
    Tuesday, April 12, 2011 2:19 PM
  • I also had problem 1015 and 10016 on my server. Problem 10016 has been resolved by granting access to DCOM objects: IIS WAMREG admin Service and {000C101C-0000-0000-C000-000000000046}. I've granted full access to C:\Program Files\Microsoft Office Servers\14.0 but problem 1015 still exists.
    • Proposed as answer by jriesen1 Wednesday, November 16, 2011 5:59 PM
    • Unproposed as answer by jriesen1 Wednesday, November 16, 2011 5:59 PM
    Monday, September 26, 2011 7:56 AM
  • Follow this technet article for resolution of 1015 error:  http://technet.microsoft.com/en-us/library/cc735600(WS.10).aspx
    Wednesday, November 16, 2011 5:59 PM
  • I am having the same problem. Registering the Windows Installer service according to the above TechNet article does NOT solve the problem.

    Only resolution so far is adding the Farm Account to local administrators group on all farm servers (see this thread http://social.technet.microsoft.com/Forums/ar/sharepoint2010setup/thread/59b2ecc6-e3e2-4b3d-a8c3-194d792866f1).

    I really don't want to add Farm Account to local admins, so I hope somebody has another working solution.

     

    Best regards

    Thomas N. Sørensen

    Wednesday, December 14, 2011 1:08 PM
  • I know it's a very old thread but this still seems to be a problem in SharePoint 2013 (with March PU) - Msilnstaller 1004,1001 and 1015 warnings . Luckily there is a Microsoft KB now on this. 

    In case it helps someone out there - grant "Network Service" account Read access to 15.0 folder from "\Program Files\Microsoft Office Servers\".

    Thanks! 


    BlueSky2010
    Please help and appreciate others by using forum features: "Propose As Answer", "Vote As Helpful" and "Mark As Answer"

    Friday, November 14, 2014 6:17 PM