Constant DCOM 10004 Errors in Event Log (Not IWAM!)

Hi, oh my god I hope someone can help! Here is the error message:

DCOM got error "Logon failure: unknown user name or bad password. "
and was unable to logon XXX\Administrator in order to run the server:
{888FC943-CB7D-43E7-BB64-905342B0D34D}

The GUID does NOT show up in regedit, regedt32, or general text
searches of the ENTIRE server, with or without dashes. This message
began after I changed the admin password on the server. It isn't any
third party software, that's been checked. Does anyone have ANY
ideas??? I'm totally spent on this, and they just keep coming,
filling up the event log files, one every few minutes or so!

Thank you,
Rick

Dave
Mon Nov 08 15:00:12 CST 2004

Sounds like you've done a little research on this already. Two things:
since it happened with the admin password change, I'd try looking through
Services to see what runs under Administrator. If there are any services
running under the Administrator account, make sure their passwords are
changed to match the new admin password you set. Also, you might search
support.microsoft.com for "dcom 1004" There are only about 10 results -
does anything jump out at you?


"Rick Sunderland" <erinline@REMOVETHIS.yahoo.com> wrote in message
news:14lvo0dodlar00pb97ijch7oe894qavatj@4ax.com...
> Hi, oh my god I hope someone can help! Here is the error message:
>
> DCOM got error "Logon failure: unknown user name or bad password. "
> and was unable to logon XXX\Administrator in order to run the server:
> {888FC943-CB7D-43E7-BB64-905342B0D34D}
>
> The GUID does NOT show up in regedit, regedt32, or general text
> searches of the ENTIRE server, with or without dashes. This message
> began after I changed the admin password on the server. It isn't any
> third party software, that's been checked. Does anyone have ANY
> ideas??? I'm totally spent on this, and they just keep coming,
> filling up the event log files, one every few minutes or so!
>
> Thank you,
> Rick

Rick
Mon Nov 08 16:06:23 CST 2004

Hi, and thank you soooo much for the reply. I've already been through
the services to check for account info, so we can rule that out (good
suggestion though), and I'm looking at the KB articles now. I'll post
a follow-up tomorrow. Thanks again for the quick reply!

>Sounds like you've done a little research on this already. Two things:
>since it happened with the admin password change, I'd try looking through
[snip]

Rob
Mon Nov 08 18:23:59 CST 2004

Last time I changed the admin password on my SBS 2000 server, I noticed
the password was not updated for the ISA reports. You might want to
check that out. I don't remember any DCOM error message in the event
log though.

In article <14lvo0dodlar00pb97ijch7oe894qavatj@4ax.com>,
erinline@REMOVETHIS.yahoo.com says...
> The GUID does NOT show up in regedit, regedt32, or general text
> searches of the ENTIRE server, with or without dashes. This message
> began after I changed the admin password on the server.

Rick
Tue Nov 09 15:38:52 CST 2004

kjsl;gjsd;ljgksfd; DAVE!!!!!!!!!!!!! Thank you for that suggestion.
This one right here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;255770
did it for me, because it made me think.

Now, this article didn't *specifically* solve MY problem, but like I
said it got me thinking and so I went through each of the COM+
components until I found the one with the incorrect Account
information.

Thanks again!!!!!!!!!! I hope this helps someone else as well!!!

peace

On Mon, 8 Nov 2004 16:00:12 -0500, "Dave Nickason [SBS MVP]"
<gwdibble@NOSPAM.frontiernet.net> wrote:

>Sounds like you've done a little research on this already. Two things:
[snip]
>changed to match the new admin password you set. Also, you might search
>support.microsoft.com for "dcom 1004" There are only about 10 results -
>does anything jump out at you?