Windows Error – Event ID 10016 – Distributed COM Error

Windows Error – Event ID 10016 – Distributed COM Error

Windows Event ID 10016 “Distributed COM Error” has been one of the more common Event ID errors that system administrators see when reviewing logs in recent years. Included below are some examples of possible messages one may see when running Windows 10, Windows Server 2016 or some older versions of Windows Server ( 2012, 2008, etc )

Source:        Microsoft-Windows-DistributedCOM
Event ID:      10016
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.Source:        Microsoft-Windows-DistributedCOM
Event ID:      10016
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{260EB9DE-5CBE-4BFF-A99A-3710AF55BF1E}
and APPID
{260EB9DE-5CBE-4BFF-A99A-3710AF55BF1E}
to the user machine\user SID (S-1-5-21-xxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-xxxx) from address LocalHost (using LRPC) running in the application container Microsoft.Windows.ShellExperienceHost_10.0.14393.726_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-xxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx). This security permission can be modified using the Component Services administrative tool.Source:        Microsoft-Windows-DistributedCOM
Event ID:      10016
Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
and APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Source:        Microsoft-Windows-DistributedCOM
Event ID:      10016
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Why Am I Seeing This Error?

This error is caused by a simple permissions error – the process does not have the proper permission rights to the DCOM components that are listed within the event log.

How Do I Fix Event ID Error 10016?

First and foremost – Microsoft reports that Event ID Error 10016 can be ‘safely ignored’. You can go through the component services menu and grant permissions as needed per event log entry. If you would prefer to prevent the events from being logged please follow the below steps.

 

Note You can find the CLSID and APPID in the event log entry.
  1. Start Registry Editor (regedit).
  2. Locate the following registry subkey:
    HKEY_CLASSES_ROOT\CLSID\<Target AppID>
  3. Right-click the subkey, and then click Permissions.
  4. Click Advanced.
  5. Click Add.
  6. Click Select a principal.
  7. In the Select User or Group dialog box, enter the appropriate administrators group in the Enter the object name to select box. For example, enter <ComputerName>\Administrators.
  8. Click OK.
  9. On the Security tab, grant Full Control, and then click OK.
  10. Exit Registry Editor.
  11. Start DCOM Config (dcomcnfg).
  12. Expand Component Services > Computers > My Computer DCOM Config.
  13. Right-click the application that corresponds to the AppID that’s recorded in the event log, and then select Properties.
  14. Select the Security tab.
  15. In the Launch and Activation Permissions area, select the Customize option, and then select Edit.
  16. Under Group or user names, select Add.
  17. Enter the group or user name that’s recorded in the event log.
  18. Click OK.
Please follow, like and share Your Digital Mind:

David

I have been in the Information Technology industry for a little over a decade gaining a Bachelors degree in Information System Security and securing employment with various industries including Government, Financial, Healthcare, Corporate and the End User sectors. I started Your Digital Mind in 2016 as a way to share my love for Education, Technology and Science in an entertaining yet rewarding format. I hope you are learning and enjoying!

You May Also Like

Leave a Reply

Your email address will not be published. Required fields are marked *