JSI Tip 10394. COM+ events are logged when you install Windows XP SP2 and then join a domain?

When you install SP2 (Service Pack 2) on Windows XP and then join the computer to a domain, your event log records various COM+ events:

Event ID: 7031
Event Source: Service Control Manager
Description:The COM+ System Application service terminated unexpectedly. It has done this 1time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.

Event ID: 4609
Event Source: Event System
Description: The COM+ Event System detected a bad return code during its internal processing.HRESULT was 80070005 from line 44 ofd:qxp_slpcomcom1xsrceventstier1eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.

Event ID: 4689
Event Source: COM+
Description: The run-time environment has detected an inconsistency in its internal state. This indicates a potential instability in the process that could be caused by the custom components running in the COM+ application, the components they make use of, or other factors. Error in d:qxp_slpcomcom1xsrccomsvcseventslcedisp.cpp(129), hr = 80040206: Failed to CoCreate EventSystem object.

Event ID: 4455
Event Source: COM+
Description: Failed to create event class. Please check the event log for any other errors from the EventSystem.CLSID_ComServiceEvents

Server Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}
Server Application Instance ID:{3ACAFEF6-6926-45F7-A453-5F13E96418DE}
Server Application Name: System Application
Error Code = 0x80040154 : Class not registered
COM+ Services Internals Information:
File: d:qxp_slpcomcom1xsrccomsvcseventslcedisp.cpp, Line: 701
Comsvcs.dll file version: ENU 2001.12.4414.258 shp.

Event ID: 4156
Event Source: COM+
Description: String Message: First attempt to CoCreateInstance(CLSID_ComSystemAppEventData)failed!

Event ID: 4822
Event Source: COM+
Description: A condition has occurred that indicates this COM+ application is in an unstablestate or is not functioning correctly. Assertion Failure: SUCCEEDED(hr)

Server Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}
Server Application Instance ID:{3ACAFEF6-6926-45F7-A453-5F13E96418DE}
Server Application Name: System Application
The serious nature of this error has caused the process to terminate.
Error Code = 0x8000ffff : Catastrophic failure
COM+ Services Internals Information:
File: d:qxp_slpcomcom1xsrccomsvcstrackertrksvrtrksvrimpl.cpp, Line: 3000
Comsvcs.dll file version: ENU 2001.12.4414.258 shp

Event ID: 8193
Event Source: VSS
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80040206.

Event ID: 4442
Event Source: COM+
Description: A log information record was not found in the existing CRM log file. It has been added. If this warning appears when the CRM log file is being initially created then no further action is required.

Server Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}
Server Application Instance ID:{D4C1067D-E53E-4197-A93E-268A767AE177}
Server Application Name: System Application
Comsvcs.dll file version: ENU 2001.12.4414.258 shp

You may also experience one or more of the following:

- Expanding a computer node in the Component Services MMC snap-in causes the node to close.

- The COM+ System Application service will not start, reporting:

Could not start the COM+ System Application service on Local Computer. Error 1067: The process terminated correctly.

- When you select the Dependencies tab in a service, you receive:

Win32: Access is denied

To resolve this behavior:

1. Start / Run / secpol.msc / OK.

2. Expand Local Policies / User Rights Assignment in the left-hand pane.

3. Double-click Impersonate a client after authentication in the right-hand pane.

4. Press Add User or Group.

5. Type service in the Enter the object names to select box.

6. Press OK and OK.

7. Shutdown and restart Windows XP.