Troubleshooting DCOM Error while scanning

"Either access denied for the user or the remote DCOM option might be disabled in the workstation."

This error will occur if the login credentials provided for scanning is invalid or the Remote DCOM is not properly configured in the target workstation.

Given below is the procedure to troubleshoot the above mentioned error:

Step 1:

For Windos workstations "Windows Domain Scan" mode will be more efficient than "Network Scan" mode. Configure the login credentials for the Domain/Workgroup to which the workstations belong and scan the Domain.

Check if the login credentials are provided in correct format. For login credentials ensure that you haven't entered the DomainName along with the userName (i,e Do not Enter as DoaminName\\UserName). It is sufficient if only the UserName is entered in the provided text-field.

Step 2:

Ensure that the login information provided are correct and has administrator privileges in the target computers. To check if the login information provided is valid you can execute the following commands at the command prompt in the server where ServiceDesk Plus is running.

net use \\<RemoteComputerName>\C$ /u:<DomainName\UserName> "<password>"
net use \\<RemoteComputerName>\ADMIN$ /u:<DomainName\UserName> "<password>"

Note: Replace the relevant value within <>. Supply password within the quotes.

If the above commands succeeds and Scanning fails, then the problem might be in the DCOM Configurations.

Step 3:

Ensure Remote DCOM is enabled on the target workstations.

To Enable DCOM in Windows 2000 Computers

1. Select Start > Run
2. Type DCOMCNFG in the text field
3. Click OK.
4. Select Default Properties tab
5. Check the box "Enable Distributed COM in this machine"
6. Press OK

To Enable DCOM in Windows XP Computers

1. Select Start > Run
2. Type DCOMCNFG in the text field
3. Click OK
4. Right Click on Component Services > Computers > My Computer
5. Click Properties
6. Select Default Properties tab in the frame that pops
7. Check the box "Enable Distributed COM in this machine"
8. Press OK

Try scanning the workstation after Enabling Remote DCOM.

Step 4:

If scanning fails after enabling remote DCOM, give more DCOM permissions and try scanning the workstation.

1. Start -> Run -> DCOMCNFG
2. Choose the DEFAULT PROPERTIES tab
3. Chek the check-box Enable Remote DCOM on this computer
4. Set the Default Authentication Level as DEFAULT. NONE also can be set.
5. Set the Default Impersomation Level as IMPERSONATE.
6. Now select the DEFAULT SECURITY tab.
7. Click the Edit Default button under Default Access Permission.
8. In the Frame that pops, click the ADD button and add "Everyone" with Allow Access permission.
9. Similarly, under the Default Launch Permission add "Everyone" with Allow Launch permission.
10. Click OK and now try scanning the workstation.

NOTE: Sometimes DCOM Settings will be effective after restarting the server.

Step 5:

In certain cases, the problem might be due to enabling "Simple File Sharing". To disable "Simple File Sharing":

1. In any of the Windows Folders Click "Tools" > "Folder Options".
2. In the Folder Options window, goto "View" tab.
3. Uncheck "Use simple file sharing"
4. Click "OK" to save changes.

Step 6:

If the target workstations are Windows XP try modifying the Network Access Security Model.

1. Goto Control Panel -> Administrative Tools -> Local Security Policy
2. Right Click "Network Access : Sharing and security model for local accounts" and then select Properties
3. Choose the option "Classic - local users authenticate as themselves" and apply
4. Restart and scan the workstation.

Thanks,
Prathees.R
[ServiceDesk Plus Support]