Event ID 513 CPAI2, grrr

I was getting the following errors on my windows server 2008, running 64 bit in the event logs.

After doing a little research and googling the event id itself, I found a resolution to the error. Turns out the permission on my second domain controller did not get set correctly when installing.

I tried the following at first which did not work after running the vssadmin list writers  in command prompt. You will need to run this as admin in order for it to work properly. Simply right click on the command prompt and then “run as admininstrator”.

Anywho, like I said the following did not work at first.

Modify the access control list on the registration folder

Component Object Model (COM) applications must be able to access the COM+ catalog files that are stored in the COM catalog folder. If the default access control list is changed on the COM catalog folder within the Windows folder, the Shadow Copy System Writer may not work properly.

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To modify the access control list on the COM catalog folder:

1. Click Start, and then click Computer.
2. Navigate to %systemdrive%\Windows.

   By default, %systemdrive% is located at C:\.

3. Right-click Registration, click Properties, and then click the Security tab.
4. Click Advanced, and then click Edit.
5. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
6. Click Edit to view the special permissions assigned to this folder.
7. Ensure that the access control list matches the following criteria:
   • The local Administrators group has Full Control permissions applied to This folder and files.
   • The Everyone group has List folder/read data, Read attributes, Read extended attributes, and Read permissions applied to This folder and files.
   • The local SYSTEM account has Full Control permissions applied to This folder and files.
8. If the permissions on this folder do not match what is listed in this procedure, make the appropriate changes, and then click OK.

Verify

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To verify that the Shadow Copy System Writer is working properly:

1. Click Start, point to All Programs, and then click Accessories.
2. Right-click Command Prompt, and then click Run as administrator.
3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
4. In the command prompt window, type vssadmin list writers.
5. Ensure that Writer Name: 'System Writer' is displayed in the list.

The "SYSTEM WRITER” did not show up as a listed when running the vssadmin list writers command. I did end up running the following commands just as listed using both the %windir% and all “ (quotes) “ as listed as well.

Takeown /f %windir%\winsxs\filemaps\* /a icacls %windir%\winsxs\filemaps\*.* /grant "NT AUTHORITY\SYSTEM:(RX)" icacls %windir%\winsxs\filemaps\*.* /grant "NT Service\trustedinstaller:(F)" icacls %windir%\winsxs\filemaps\*.* /grant BUILTIN\Users:(RX)

This did cure the problem and when running the vssadmin list writer > the System Writer was now listed and PROBLEM SOLVED.

 

biz