BUG: DCOMCNFG Fails on a Backup Domain Controller

- Microsoft OLE Libraries 4.0 included with:

   - Microsoft Win32 Software Development Kit (SDK)

SYMPTOMS

When using DCOMCNFG.EXE to set the identity of a COM server to a specific user account on a Windows NT server that is a Backup Domain Controller(BDC), it displays an error message "Incorrect Function" or "Invalid Function". When a client attempts to launch the server, the activation fails.

CAUSE

This is caused by a bug in DCOMCNFG.EXE. DCOMCNFG tries to grant a specific right("SeBatchLogonRight") to the user account on the BDC. This is an invalid operation for a BDC because a BDC has a read-only copy of the user accounts database. Any change to the accounts database must be done on the Primary Domain Controller(PDC). Then the change is replicated to the BDC.

RESOLUTION

Use DCOMCNFG to set the COM server to the specific user account. Click OK to dismiss the error message dialog box. Now, while running in a domain administrator's account, use the User Manager for Domains tool on the BDC to grant the "Logon as a batch job" right to the specific user account. This allows the server to be launched in the specific user account (you may need to wait for some time to allow the replication process to take place).

STATUS