The information in this article applies to product: e-Work 6.x
Issue
- When a user tries to login to e-Work or access a service list provider from a Win32 client (Notify, Outlook, GroupWise) using DCOM as the connection method, they receive the error message 'Access is denied.'
Resolution
The user must hold the 'Client' role in COM+ on the server running the e-Work Engine.
To add this user, go to Start --> Settings --> Control Panel --> Administrative Tools --> Component Services --> Computers --> My Computer --> COM+ Applications --> Metastorm e-Work Engine --> Roles --> Client --> Users.
If the user is not listed, they should be added. Right-click on 'Users' and select New --> User. If a Windows group is already listed as a user (e.g. e-Work Clients), then add the user to that group. If there is no group, then the user can be added by name or a Windows group can be created and added with the user as a member of the group. If a group is used, then new users can be added to the group rather than having to add each user to the COM+ role.
If an individual or group user is added to the role in COM+, then the Engine should be restarted. If a user is added to a group that already holds the role in COM+, then the Engine should not need to be restarted.
If the Engine is on a server running Windows Server 2003 SP1 or Windows XP SP2, another check needs to be made due to an additional level of security added by the service packs.
Go to Start --> Settings --> Control Panel --> Administrative Tools --> Component Services --> Computers --> My Computer. Right-click and select 'Properties.' Go to COM Security --> Access Permissions --> Edit Limits. Make sure the user or group has 'Remote Access' permission.
See also the Microsoft article Programs that use DCOM do not work correctly after you install Microsoft Windows Server 2003 Service Pack 1.
