Recently I have installed the MOSS and WSS public hotfix of October 9th (WSS 3.0 - KB934525, MOSS 2007 KB937832) on several environments. After the installation I noticed that DCOM errors were added to the eventlogs. I troubleshooted the issues and it turns out that the WSS and MOSS patches are resetting the permissions on the OSearch and SPSearch DCOM objects.
Before installing the hotfixes the security settings on both objects were:
- Administrators
- <MOSS Configuration Database account>
- <MOSS Search account>
- SYSTEM
- WSS_ADMIN_WPG
- WSS_WPG
All account had "Local Activation" and "Local Launch" permissions.
After installing the WSS patch the security settings on the SPSearch DCOM object were reset to default settings.
After installing the MOSS patch the security settings on the SPSearch DCOM object were reset to default settings.
- Administrators
- LOCAL SERVICE
- SYSTEM
Fortunatelly this was solved easily by adding the WSS_ADMIN_WPG and WSS_WPG groups to the OSearch and SPSearch object and granting them "Local Activation" and "Local Launch" permissions.
How to determine the DCOM settings??
- Start > Run
- dcomcnfg
- Component Services > Computers > My Computer >DCOM Config
- Select object OSearch or SPSearch
- Right click > Properties
- Select tab Security
- Click Edit at "Launch and Activation Permissions"
No comments:
Post a Comment