Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 934701 - Last Review: October 31, 2007 - Revision: 1.2
Error message when you try to view certain Windows Server 2003 components and snap-ins: "error code 80040153 - Invalid value for registry"
When you try to view certain Microsoft Windows Server 2003 components and snap-ins, some information may not appear correctly. For example, you may experience any of the following symptoms:
- When you try to view the Disk Management Microsoft Management Console (MMC) snap-in, you receive the following error message:
error code 80040153
- Invalid value for registry
- When you try to expand COM+ programs in Component Services, you receive the following error message:
error code 80040153
- Invalid value for registry
- When you view the Services MMC snap-in, the details pane is empty.
- When you double-click an event
in Event Viewer, the event does not open.
- When a program is minimized, the program does
not appear on the taskbar.
- When you click About Internet Explorer on the Help tab in Internet Explorer, the version and the product information does not appear.
- Other snap-ins and utilities display blank areas in which you expect configuration information to appear.
When this issue occurs, error events that resemble one or more of the following may be logged in the System log:
Error event 1Event ID 10022
Source: COM
Description: The machine-default access security descriptor for the COM Server
application D:\exchsrvr\bin\mad.exe is invalid. It contains access control entries
with permissions that are invalid. This security permission can be corrected using
the Component Services administrative tool.
Type: Error
Date: 03/14/2006
Time: 12:42:45 PM
Event ID: 10022
Source: COM
User: N/A
Computer: Computer_Name
Details:
machine-default C:\WINDOWS\system32\CPQNiMgt\cpqnimgt.exe
Type: Error
Date: 03/14/2006
Time: 12:42:31 PM
Event ID: 10022
Source: COM
User: N/A
Computer: Computer_Name
Details:
machine-default C:\WINDOWS\Explorer.EXE
Type: Error
Date: 03/14/2006
Time: 12:35:43 PM
Event ID: 10022
Source: COM
User: N/A
Computer: Computer_Name
Details:
machine-default \??\C:\WINDOWS\system32\winlogon.exe
This issue may occur when DCOM permissions are incorrect. However, you may be unable to modify those permissions by using the Dcomcnfg utility. The Dcomcnfg utility cannot open the properties for a local computer.
To resolve this issue, modify DCOM permissions by using the Dcomcnfg utility on a different Windows Server 2003-based computer on the network. To do this, follow these steps:
- On another Windows Server 2003-based computer, start the Dcomcnfg utility.
- Expand Component Services, and then expand Computers.
- Right-click Computers, point to New, and then click Computer.
- In the Browse box, type the name of the computer that you want to modify, and then click
OK.
- Double-click the new computer, and then click Edit Default under Access Permissions on the COM Security tab.
- Make sure that the following user permissions are configured, and then click OK:
- Your username: Allow Local Access and Remote Access
- SYSTEM: Allow Local Access only
- Under Launch and Activation Permissions, click Edit Default.
- Make sure that the following user permissions are configured, and then click OK:
- Administrators (LocalSystem\Administrators) with Allow: Local Launch, Remote
Launch, Local Activation and Remote Activation
- INTERACTIVE with Allow: Local Launch, Remote Launch, Local Activation and
Remote Activation
-
SYSTEM with Allow: Local Launch, Remote Launch, Local Activation and Remote
Activation
Note There may be third-party applications that require an
account included in the Access Permissions dialog box. However, unknown accounts or security identifiers (SID)
should not be included.
- Click OK, and then exit the Dcomcnfg utility.
APPLIES TO
- Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
- Microsoft Windows Server 2003, Standard Edition (32-bit x86)
| kbtshoot kbexpertiseadvanced kbprb KB934701 |
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate