DCOM Error 10016 – IIS WAMREG admin Service

To fix this we need to give the WSS_WPG and WSS_ADMIN_WPG groups local launch and activation permissions to the IIS WAMREG admin service (CLSID {61738644-F196-11D0-9953-00C04FD919C1}). Simple right?

Not in Windows Server 2008 R2 it is not.

Due to the enhanced security model of Windows Server 2008 R2 (and Windows 7!) if you just fire up the dcomcnfg utility and attempt to change the security permissions, all options are greyed out.

 

To get round this we need to change the ownership of the registry key, change the permissions on the registry key to allow us to edit the DCOM permissions.

Open regedit and find the key that maps to the IIS WAMREG admin service.

HKEY_CLASSES_ROOTAppID{61738644-F196-11D0-9953-00C04FD919C1}

Note that the local administrators group only has read access to the key

 

Click ‘Advanced’, select the ‘Owner’ tab and change the current owner to Administrators

 

Now you can change the permission for the registry key. Grant the local administrators group full control, apply the changes and then re-open the dcomcnfg utility (note that if the utility was previously opened, it must be closed and re-opened for the permissions change to take effect). The options on the security tab of the property sheet for the IIS WAMREG service are now active and can be amended. Hit edit on the ‘Launch and Activation Permissions’ section

 

Allow the WSS_ADMIN_WPG group and the WSS_WPG group ‘local launch’ and ‘local activation’ permissions.

 

No more errors.

This entry was posted in SharePoint 2007, SharePoint 2010 and tagged . Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>