After installing SP1 SQL Server 2012 Activity monitor gives Access denied. by CERWK

Im getting the Access Denied error on a Windows 2008 R2 machine using SQL 2012 Sp1, connecting from another domain using SQL authentication. It was working fine for months even with the Service Pack but has just started to block access from my management studio on my desktop

If you’re getting Access Denied – unfortunately the only way is to either enable DCOM permissions as it was suggested in the workaround, or to upgrade to more recent OS. Windows Server 2003 is out of regular support cycle anyway (http://support.microsoft.com/lifecycle/search/default.aspx?sort=PN&alpha=windows+server&Filter=FilterNO)

If you’re getting “Invalid Query” error message in the same configuration – I’d recommend look at this hotfix, since it addresses the issue: http://support.microsoft.com/kb/932370

Vladimir Svidersky [MS SQL SERVER]

And you didn't list this as a breaking change when upgrading to sp1 in the docs??

If you are remotely accessing to a server, 2012 SP1 requires additional permissions. The user needs to have remote access to the computer through DCOM.

I am also having this issue.

Could DCOM rights on the server for my user have changed due to me installing SQL server 2012 sp1 on my workstation? Or does 2012 sp1 require additional DCOM rights that were not necessary before sp1 was installed? This worked prior to installation of sp1.

Hi,

Are you remotely accesing to a server? This issue could have occured if you don't have remote access to the computer through DCOM. Typically, DCOM errors occur when connecting to a remote computer with a different operating system version. If this is the case, please try give the user Remote Launch and Remote Activation permissions.

Please follow the steps:

1. Click Start, click Run, type DCOMCNFG, and then click OK.
2. In the Component Services dialog box, expand Component Services, expand Computers, and then right-click My Computer and click Properties.
3. In the My Computer Properties dialog box, click the COM Security tab.
4. Under Launch and Activation Permissions, click Edit Limits.
5. In the Launch Permission dialog box, select your user and group in the Group or user names box. In the Allow column under Permissions for User, select Remote Launch and select Remote Activation, and then click OK.
6. Under Access Permissions, click Edit Limits and give Remote Access to your user.
7. Go to DCOM Config(Expand My Computer), find "Windows Management Instrumentation", right-click and select Properties
8. In the Security tab, click on Edit under Launch and Activation Permissions, and give your user Remote Launch and Remote Activation.

For more information, see Securing a Remote WMI Connection
http://msdn.microsoft.com/en-us/library/windows/desktop/aa393266(v=vs.85).aspx

Thank you for reporting this issue - we are investigating and will update you when we have more information.

Thanks,

Alex Grach [MSFT SQL SERVER]