Premium Antispam in Mail Security for Microsoft Exchange (SMSMSE) is not scanning for spam. The activity counter on the home page of the SMSMSE console stays at 0 for spam scans, despite Premium AntiSpam being licensed and enabled.
In the System event log, an event ID 10016 from source Distributed COM with the following details is logged:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
The Microsoft Exchange Transport service, which runs under the Network Service account, does not have DCOM Local Activation permission to the SAVFMSESpamStatsManager class.
Add Local Activation permission to the Network Service account on SAVFMSESpamStatsManager Class in DCOM configuration.
To add Local activation permission
Open the DCOM configuration MMC (Start -> Run, type dcomcnfg and press Enter)
In the Component Services window, in the left pane, expand Component Services -> Computers -> My Computer -> DCOM Config
Right click the object SAVFMSESpamStatsManager and select Properties.
Select the Security tab and under Launch and Activation permissions select Customize, then click Edit...
In the Launch and Activation Permission dialog Click Add...
In the "Enter the obect names to select" box, type Network Service and click OK.
Check Allow for "Local Launch" and "Local Activation" and click OK.