Web Connection
Unable to load COM - 'Active Account' wrong
Gravatar is a globally recognized avatar based on your email address. Unable to load COM - 'Active Account' wrong
  Michael Hogan (Ideate Hosting)
  All
  Jul 31, 2020 @ 01:27pm

I'm moving my WebConnect 5 app to a new server. The DCOM Identity is set to administrator. When I try to go into admin functions, it says:

The application COM servers could not be loaded: Unable to load server - Access Denied. Active account: InterlightWebsite

I cannot for the life of me find any config settings that refer to that account name. What am I missing?

Gravatar is a globally recognized avatar based on your email address. re: Unable to load COM - 'Active Account' wrong
  Michael Hogan (Ideate Hosting)
  Michael Hogan (Ideate Hosting)
  Jul 31, 2020 @ 01:51pm

More specifically:

Unable to load server - Access Denied. Active account: InterlightWebsite Retrieving the COM class factory for component with CLSID {DD82C8BB-6C08-4F6B-97C3-7A0EB7DB40AE} failed due to the following error: 80070005 Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)).

Gravatar is a globally recognized avatar based on your email address. re: Unable to load COM - 'Active Account' wrong
  Michael Hogan (Ideate Hosting)
  Michael Hogan (Ideate Hosting)
  Jul 31, 2020 @ 02:09pm

OK - I think I have it now.

Looks like I had the wrong Application Pool selected for the website... I corrected that to use the West Wind Web Connection Application Pool and that seems to have cured it.

Seems the 'Active Account' in the error message was referring to the App Pool Name - quite unintuitive.

Gravatar is a globally recognized avatar based on your email address. re: Unable to load COM - 'Active Account' wrong
  Rick Strahl
  Michael Hogan (Ideate Hosting)
  Aug 1, 2020 @ 01:15pm

I don't recommend setting the DCOMCNFG settings - set the identity at the Application Pool level.

What happened is this most likely: You set the DCOM permissions which determines who can access the server and what rights it runs under. But the launching account (ie. the AppPool account - Application Pool Identity most likely) doesn't have the rights to Launch the COM server in the first place.

If you set the identity at the Application Pool that typically is all you need assuming you choose an account that has rights to launch COM objects. If you use Network Service or SYSTEM or a specific account with admin rights that's all that's needed. If you use a custom account without admin rights you have to experiment - I believe in that case you have to set the DCOM Launch permissions to allow that account to launch the server.

+++ Rick ---

© 1996-2020