| Previous | Next |
| COMADMIN_E_RECYCLEDPROCESSMAYNOTBEPAUSED | COMADMIN_E_PARTITION_MSI_ONLY |
COMADMIN_E_PARTITION_ACCESSDENIED
COMADMIN_E_PARTITION_ACCESSDENIED is the failure HRESULT 0x80110818 (signed decimal -2146367464, unsigned decimal 2148599832). Its severity bit is 1, facility is 17 (FACILITY_ITF), and the facility-specific code field is 0x0818.
Authorization boundary of a COM+ partition: exact meaning of COMADMIN_E_PARTITION_ACCESSDENIED
The partition exists, but access to it is denied for the effective caller or administration context. Partition administration has its own rights and identity mappings; local machine administration does not automatically prove permission for every partition operation.
AllStat records the Windows SDK description as “Access to the specified partition is denied.”
Where the result occurs
The result may arise while querying, configuring, moving applications, or activating within a partition after the partition ID has been accepted. Remote COM authentication and the COM+ System Application Administrator role can affect the decision.
Evidence to collect before changing the catalog
- caller token/SID, elevation state, remote target, authentication and impersonation levels.
- partition ID/name and relevant System Application role membership.
- local versus remote execution results under the same account.
- security events, COM+ events, and the exact denied administration method.
Typical cause branches
- the effective caller is not authorized to administer the partition.
- remote COM authentication or impersonation prevents the server from evaluating the intended identity.
- the operation runs under a service account different from the interactive administrator.
- partition or System Application role assignments changed after the tool connected.
Diagnostic sequence
- identify the effective server-side identity rather than the desktop user.
- verify the partition exists and separate access denial from invalid identity.
- review supported COM+ administrative rights and role assignments.
- correct the minimum required authorization or remote COM configuration.
- reconnect with a fresh COMAdmin session and repeat the exact method.
Practical administration scenario
A remote deployment account can enumerate the local computer but lacks the COM+ System Application role needed to modify a tenant partition.
Retry and recovery
Retry only after identity or authorization changes. Repeated attempts under the same denied token can create noise and account lockout risk without changing the decision.
Difference from nearby COMADMIN results
COMADMIN_E_INVALID_PARTITION rejects the partition identifier; COMADMIN_E_PRIVATE_ACCESSDENIED concerns activation of a private component. This value applies to access at the partition boundary.
What this HRESULT does not establish
The result does not establish that the partition is missing or disabled, and it does not justify granting broad local administrator rights without identifying the required COM+ permission.
Developer and operations guidance
Record caller SID, token/elevation, authentication/impersonation levels, partition ID, method, server, role membership snapshot, and correlated security event IDs.
Official Microsoft references
- Microsoft: COMADMIN error codes
- Microsoft: administrative rights for a partition
- Microsoft: what COM+ partitions are
- Microsoft: managing local partitions
- Microsoft: accessing the COM+ catalog
Looking for a different code? Search another status or error code.