How To Fix Nap Agent Service Dcom Error
(עברית)المملكة العربية السعودية (العربية)ไทย (ไทย)대한민국 (한국어)中华人民共和国 (中文)台灣 (中文)日本 (日本語) Home2012Previous VersionsLibraryForumsGallery Ask a question Quick access Forums home Browse forums users FAQ Search related threads Remove From My Forums Answered by: SCCM and Network Access Protection (DCOM Error) System Center Configuration Manager > Configuration Manager 2007 General Question 0 Sign in to vote Hi All, I have SCCM 2007 SP1 R2 on W2k8sp2x64 installed. By default the service “Network Access Protection Agent” is stopped and Start Type mode is set to Manual. As far as I understand, that service must be started and set to automatic only when we use Network Access Protection. http://technet.microsoft.com/en-us/library/bb680600.aspx I don’t use Network Access Protection and it is disabled for ConfigMgr site, so the NAP service is set to Manual. Every time when system is restarted (Vista or 2008) the following error appears: Event ID 10016. The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {24FF4FDC-1D9F-4195-8C79-0DA39248FF48} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool. smssha.log
Administration Kit 8.0→Troubleshooting Product Select Knowledge Base Installation and Removal License Management General Info Updating Server Management Host Management Tools and Utilities Reports and Notifications Troubleshooting Downloads & Info System Requirements Common Articles How-to Videos Forum Contact Support Safety 101 Kaspersky Administration Kit 8.0 Cannot access Microsoft NAP Agent: Event ID 10016 Back to "Troubleshooting" 2012 Jan 23 ID: 2847 Applies to: Kaspersky Anti-Virus 6.0 for Windows Workstations MP4 Kaspersky Anti-Virus 6.0 SOS https://social.technet.microsoft.com/Forums/systemcenter/en-US/95cf98dd-d7c0-47d6-9ac9-605484f80503/sccm-and-network-access-protection-dcom-error?forum=configmgrgeneral MP4 Kaspersky Anti-Virus 6.0 for Windows Servers MP4 Kaspersky Administration Kit 8.0Error Event ID 10016 may appear in the Event log on a client computer with Network Agent version 8.0.2048 - 8.0.2090 installed: Event Type: ErrorEvent Source: DCOMEvent Category: NoneEvent ID: 10016This error may occur in any operating system.The event log registers this error when Network Agent attempts to access the Network Access Protection http://support.kaspersky.com/2847 Agent service on a client PC where this service is installed but disabled. This error does not occur on computers with Network Access Protection service enabled.We recommend the following solution: disable the interaction between the Network Agent and Network Access Protection Agent if your network does not use NAP.In order to be able to automatically disable/enable Network Access Protection Agent to Network Agent interaction: Download the file disablenap.zip and extract its content using an archiver program, such as WinZip;Run the deployment task you have created.Create a deployment task for the installation package. Create an installation package for the file disablenap.exe; If you have the Network Access Protection Agent service enabled on client computers after installing disablenap.exe, you should download the file enablenap.zip and perform the same process, i.e. create an installation package and run a deployment task, with the downloaded enablenap.exe file. This will restore the interaction between the Network Agent and Network Access Protection Agent service.Starting with version 8.0.2090 (Administration Kit 8.0 CF1), Network Agent supports interaction with NAP service via a 32-bit DWORD value Enable in the MS Windows registry.The value Enable is always a 32-bit one, regardless of opearting system type.Perform the follow
started to appear in the System event log:-----------------------------------------------------------------------------------Event Type: ErrorEvent Source: DCOMEvent Category: NoneEvent ID: 10016Date: 20/01/2010Time: 13:05:39User: NT AUTHORITY\SYSTEMComputer: https://forum.kaspersky.com/lofiversion/index.php/t154653.html RADD2217Description:The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {24FF4FDC-1D9F-4195-8C79-0DA39248FF48} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security permission can be modified using the Component Services administrative tool.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.-----------------------------------------------------------------------------------You have to search through the registry to find out that the CLSID given relates to how to the NAP Agent. We've modified the permissions on a couple of machines and the error has now gone, but why did it start appearing in the first place? It's definately the installation ofthe Agent that causes it.Any ideas? Testeur09 20.01.2010 19:54 There is a fix for it, just search the forum a bit. Or wait for CriticalFix 1 release notes, it may how to fix be include with it. Mike Frith 20.01.2010 20:04 I'm normally quite good for searching before posting.... Oh well.Thanks for the info! Mikhail Kolobashkin 20.01.2010 22:19 Mike FrithAs a solution you can enroll disablenap.exe. The process is described in this kb 2847 http://support.kaspersky.com/faq/?qid=208280868. devolution 6.02.2010 05:27 QUOTE(Mikhail Kolobashkin @ 20.01.2010 11:19) Mike FrithAs a solution you can enroll disablenap.exe. The process is described in this kb 2847 http://support.kaspersky.com/faq/?qid=208280868.the easiest way to fix this is to open 'Administrative Tools>Component Services>DCOM config' and find 'NAP Agent Service'. right-click and select properties, then on the 'Security' tab under 'Launch & Activation Permissions', select 'Use Default'. ok your way out and that should take care of it.i found this fix somewhere on the internet. as far as i know it works.EDIT: NVM, i see you figured this out already. i didn't read the part below the event log entry. salamone 26.03.2010 01:27 QUOTE(Mike Frith @ 20.01.2010 10:15) Since we upgraded our PC's to V8 of the Network Agent, The following error has started to appear in the System event log:-----------------------------------------------------------------------------------Event Type: ErrorEvent Source: DCOMEvent Category: NoneEvent ID