In windows, DCOM error logs are analyzed. Recently, a client's server crashes. I checked the logs and found many DCOM error logs. I don't know if they are the cause of the crash, handle it first.
Log content: Event Type: Error Event Source: DCOM event type: None event ID: 10016 Date: 4/8/2009 event: 11:09:44 AM User: nt authority \ network service computer: DMS_DEALER_WEB
Description: www.2cto.com machine-default permission setting the Local Activation permission of the COM server application (CLSID: {000C101C-0000-0000-C000-000000000046}) is not granted to the user nt authority \ network service sid (S-1-5-20 ). You can use the component service management tool to modify this security permission. The log content means that the user's network service does not have local activation permission for the application whose CLSID is 000c101c-0000-0000-c000-0000000000000046. Therefore, find this application, add the Local activation permission to the component service management tool. The procedure is as follows: www.2cto.com 1) because only the component name and Application ID (APPID) are displayed in the component service management tool ), therefore, you must first go to the Registry to find the APPID of the application corresponding to the CLSID. 2) Open the registry, find the APPID under HKEY_CLASSES_ROOT \ CLSID \ {000C101C-0000-0000-C000-000000000046}, and copy the APPID value. 3) Find the application corresponding to this APPID in the component service management tool and open the properties of the application, under "Start and activate Permissions" on the Security tab in properties, select Custom-edit. In the displayed window, add the user network service, select "Local activation.
Description: http://forums.techarena.in/windows-x64-edition/754746.htm