I got, you got, she's got, he's got

MUTEX. CreateMutex too and the perennial MVP CglobalMutex.
Yes, it's true, you may have this too, but only if you have an old version of Symantec Mail Security for Domino (SMSDOM.exe).

Imagine my surprise when setting up an LDAPsearch test with a client and see this error:

SMSDOM Panic: CreateMutex failed in CGlobalMutex constructor
[Windows Err Num: 5 (0x5): Access is denied.]

Now I know BES has the discombobulator and Domino has its own funny messages, but never hit this one until today.

Quick search of the IBM toolbar shows only 2 references, this and that technotes. The latter one is related to an LEI error of the same nature.

This says:

This issue with terminal service is fixed in Domino 6.5.6 and 7.0.2 levels. If running at levels below, issue the command locally on the server.

WAIT! That's not what we were doing at all, but it explains a lot, server is 7.0.1 What's interesting is we were running ldapsearch of course locally and in a command prompt. Maybe I should let support know this message needs to include these options.

They basically tell you to go here(syamntec's technote) which of course says:

To mitigate the problem, install update your version of Symantec Mail Security for Domino.
The Symantec Mail Security for Domino extension manager must load Nnem.dll in the same instance of NNTASK for proper operation.

So go get an updated version.

Client decided they don't need it anymore and anyway they have the new version just never installed it. They are going to Barracuda, thus the LDAP call.

I am never amazed at the excellent coding error messages displayed from vendors.