Join Our Newsletter!

Windows Error – Event ID 10016 – Distributed COM Error

Reading Time: 3 minutes

Windows Error – Event ID 10016 – Distributed COM Error

Windows Event ID 10016 “Distributed COM Error” has been one of the more common Event ID errors that system administrators see when reviewing logs in recent years. Included below are some examples of possible messages one may see when running Windows 10, Windows Server 2016 or some older versions of Windows Server ( 2012, 2008, etc )

Source:        Microsoft-Windows-DistributedCOM
Event ID:      10016
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.Source:        Microsoft-Windows-DistributedCOM
Event ID:      10016
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{260EB9DE-5CBE-4BFF-A99A-3710AF55BF1E}
and APPID
{260EB9DE-5CBE-4BFF-A99A-3710AF55BF1E}
to the user machine\user SID (S-1-5-21-xxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-xxxx) from address LocalHost (using LRPC) running in the application container Microsoft.Windows.ShellExperienceHost_10.0.14393.726_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-xxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx). This security permission can be modified using the Component Services administrative tool.Source:        Microsoft-Windows-DistributedCOM
Event ID:      10016
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
and APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Source:        Microsoft-Windows-DistributedCOM
Event ID:      10016
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Why Am I Seeing This Error?

This error is caused by a simple permissions error – the process does not have the proper permission rights to the DCOM components that are listed within the event log.

How Do I Fix Event ID Error 10016?

First and foremost – Microsoft reports that Event ID Error 10016 can be ‘safely ignored’. You can go through the component services menu and grant permissions as needed per event log entry. If you would prefer to prevent the events from being logged please follow the below steps.

 

Note You can find the CLSID and APPID in the event log entry.
  1. Start Registry Editor (regedit).
  2. Locate the following registry subkey:
    HKEY_CLASSES_ROOT\CLSID\<Target AppID>
  3. Right-click the subkey, and then click Permissions.
  4. Click Advanced.
  5. Click Add.
  6. Click Select a principal.
  7. In the Select User or Group dialog box, enter the appropriate administrators group in the Enter the object name to select box. For example, enter <ComputerName>\Administrators.
  8. Click OK.
  9. On the Security tab, grant Full Control, and then click OK.
  10. Exit Registry Editor.
  11. Start DCOM Config (dcomcnfg).
  12. Expand Component Services > Computers > My Computer DCOM Config.
  13. Right-click the application that corresponds to the AppID that’s recorded in the event log, and then select Properties.
  14. Select the Security tab.
  15. In the Launch and Activation Permissions area, select the Customize option, and then select Edit.
  16. Under Group or user names, select Add.
  17. Enter the group or user name that’s recorded in the event log.
  18. Click OK.
Please follow, like and share Your Digital Mind:

Leave a Reply

Your email address will not be published. Required fields are marked *