DCOM error Message in System Log

[Wayne Whittle]

Approximately evey two and half hours I get the following message in the System event log:

DCOM got error "The operation completed successfully. " and was unable to logon PCUWNET\sweepupd in order to run the server: {3E2E4965-2518-40A4-A72B-95FCE2809D03}

As usual I cannot find anything on the Microsoft website! I did have an account sweepupd which was used for Sophos Anti Virus updates but I have removed this. All Sophos services are running with the System account.

Any help would be very much appreciated.

[Chris Ciapala]

Try to run dcomcnfg, then navigate to DCOM config. You can find there what is hiding behind this long name, and you can find out what this component is trying to do and under which account.

HTH,
Chris

[Wayne Whittle]

I think I got it now. sweepupd was a deleted service account I set up previously. However I found out that it remained in a couple of group policy settings. So by running Resultant Set of Policy Settings (rsop.mmc) I was able to identify the problem GPO settings and remove this account from them.

This begs the thought - why doesn't GPO remove accounts when they are removed from AD ???