Problem:
Analyzing the event logs of several of our SharePoint servers, I found the following error repeating in two logs:
Application event:
Event Type: Error
Event Source: Windows SharePoint Services 3
Event Category: (964)
Event ID: 6398
Date: 3/29/2007
Time: 11:30:00 AM
User: N/A
Computer: xxxxxxxxxxxxxx
Description:
The Execute method of job definition Microsoft.SharePoint.Search.Administration.SPSearchJobDefinition (ID c5427b38-db0b-49da-86af-06db6b579744) threw an exception. More information is included below.
Retrieving the COM class factory for component with CLSID {629DA12E-9AD5-4FEC-B886-42C5982C5109} failed due to the following error: 80070005.
System Event:
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10016
Date: 3/29/2007
Time: 11:30:00 AM
User: xxxxxxxxxxxxxx
Computer: xxxxxxxxxxxxxx
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{629DA12E-9AD5-4FEC-B886-42C5982C5109}
to the user xxxxxxxxxxxxxx SID (S-1-5-21-1850885132-1290235432-1578531482-4359). This security permission can be modified using the Component Services administrative tool.
Cause (with Photos!):
After a little digging in the registry, I found the user account the spsearch service (Windows SharePoint Services Search Gathering Manager) ran under did not have local activation rights. In other words, the user did not have the rights to start the search crawler service.
Doing a search in the registry of the SharePoint server for the CLSID, I found: HKEY_CLASSES_ROOT\CLSID\{629DA12E-9AD5-4FEC-B886-42C5982C5109} .
Now let's look at the Component Services manager for the AppID…Found the ID! This is the component missing local activation rights.
You'll even find the service it's trying to launch. The user in this service needs local activation rights:
Resolution:
- Click Start, click Run, type dcomcnfg in the Open box, and then click OK.
- Expand Component Services, expand Computers, expand My Computer, and then click DCOM Config.
- Right-click SPSearch, and then click Properties.
- Click the Security tab.
- Under Launch and Activation Permissions, click Edit.
- In the Launch Permission dialog box, click Add.
- In the Select Users, Computers, or Groups dialog box, type the domain user account that you specified as the Windows SharePoint Services 3.0 service account, click Check Names, and then click OK.
- In the Permissions for UserName list, click to select the Allow check box that is next to Local Activation, and then click OK two times.