Jump to content
yvan_rossier

Erreur DCOM après installation Network Agent

Recommended Posts

Bonjour,

 

Y'en a t'il qui ont aussi l'erreur DCOM après l'installation du Network agent 8.0.2048

 

(The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {24FF4FDC-1D9F-4195-8C79-0DA39248FF48} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security permission can be modified using the Component Services administrative tool).

 

Cela concerne un problème de droit sur le NAP Agent Service

 

Pour ma part j'ai 2500 postes concernés

 

merci

Share this post


Link to post

Hello,

 

Reponse du support Kaspersky:

 

Téléchargement ici: http://www.kaspersky.com/support/wks6mp4/error?qid=208280868

 

"In this situation disabling NAP at Administration Kit agent is the most reasonable solution. But there is no such option in interface of Administration Kit.

So to automate this process you should kindly create group task for executing .exe file (disablenap.exe - if you need to disable NAP and enablenap.exe if you need to enable NAP).

Problem here is that SYSTEM account does not have DCOMrights to launch NAPAgent. So you may kindly configure it through dcomcnfg which changes following key in registry: HKEY_CLASSES_ROOT\AppID\{B292921D-AF50-400c-9B75-0C57A7F29BA1}\LaunchPermission. So you may change this key through script.

But on Windows Vista and Windows Server 2008 you cannot do it so easily because TrustedInstaller is the owner of HKEY_CLASSES_ROOT\AppID\{B292921D-AF50-400c-9B75-0C57A7F29BA1} key and Administrator does not have rights to change this key. To give Administrator this rights you need to change owner of the key (in regedit from context menu of this key you should go to Permissions->Advanced->Owner, there you should change owner to Administrator. Do not forget to change owner to TrustedInstaller ( ''nt service\trustedinstaller'' ) after running the script).

Though even if DCOMis configured correctly but NAPAgent service is disabled then 10016 messages will still be delivered. So the best solution is to turn off NAP in Administration Kit agent. We recommend to use disablenap utility because it is tested"

 

Bonne journée

 

 

 

Share this post


Link to post

Si j'ai bien compris, il faut donc créer une tâche installant disablenap.exe plutôt que de changer les droits ?

 

Du coup, a quoi sert le fichier fixnapdcom.bat ?

Edited by Tchup

Share this post


Link to post
Si j'ai bien compris, il faut donc créer une tâche installant disablenap.exe plutôt que de changer les droits ?

 

Du coup, a quoi sert le fichier fixnapdcom.bat ?

 

Hello,

 

Oui exactement, par contre si tu souhaite changer les droits ru peux aussi le faire :-)

 

Le fichier .bat est pour les serveurs si je me trompe pas

 

Bonne journée

Share this post


Link to post
Bonjour,

 

Y'en a t'il qui ont aussi l'erreur DCOM après l'installation du Network agent 8.0.2048

 

(The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {24FF4FDC-1D9F-4195-8C79-0DA39248FF48} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security permission can be modified using the Component Services administrative tool).

 

Cela concerne un problème de droit sur le NAP Agent Service

 

Pour ma part j'ai 2500 postes concernés

 

merci

 

Bonjour,

Voir ici, ça peut éventuellement t'aider : http://forum.kaspersky.com/index.php?showt...t&p=1178850

Bon courage...

Share this post


Link to post

×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.