Let me preface by saying I wouldn't normally be so picky about having a clean event viewer, but Ive been having an intermittent issue with an online game, as well as some strange behaviors (for example, if I've been playing Halo for a long period of time then I try to close it, it causes my PC to freeze completely requiring me to have to hold my power button down. This happens most times I try to play, but only after hours of gameplay. I've tried reinstalling windows a bunch, formatting my drive and installing from a USB, various drivers...

Anyway here are the events in question. I get these 3 warnings all at the same time shortly (a couple minutes usually) after my PC turns on:

Event 10016, Warning: DistributedCOM
"The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscDataProtection
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

The other two are for "Windows.SecurityCenter.WscBrokerManager" and "Windows.SecurityCenter.SecurityAppBroker", but otherwise say the same thing.

In the details of the event viewer, it lists the GUID as "{1B562E86-B7AA-4131-BADC-B6F3A001407E}". I wasn't able to find what this was for, but after further inspection I think it's for the BcastDVRUserService. When I search for it in the registry it only finds something related to the eventviewer, and when I try to find it in the dcomcnfg utility, it isn't listed. However, I also sometimes (less often) get 3 errors in event viewer that list that same GUID as well as the service "BcastDVRUserService_34620". This service is a part of the xbox game bar. Specifically it allows background recording so that you can press a button and it clips the last 30 seconds or whatever of your gameplay. I never use this, in fact I the settings for "DVR background recording" turned off in the game bar.

I tried to see the status of the service so I can disable it. It was set to manual but was running. When I tried to disable it I got a popup saying the "parameter is incorrect". I had to use the registry to disable it. In the registry I have two variants of this service. BcastDVRUserService_34620, and BcastDVRUserService, but only the first one is listed in Services. I disabled both of them in the registry, then restarted my PC and verified that BcastDVRUserService_34620 was disabled, but I'm still getting the same DCOM events related to "{1B562E86-B7AA-4131-BADC-B6F3A001407E}".

In addition, I also get this error:
10005 DistributedCOM:
"DCOM got error "1115" attempting to start the service SecurityHealthService with arguments "Unavailable" in order to run the server:
{8C9C0DB7-2CBA-40F1-AFE0-C55740DD91A0}"

(It also lists the aforementioned GUID) Also, I cannot find any "SecurityHealthService" on my PC. Maybe it goes by a different name.

Warning 10016 DistributedCOM:
'The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{37399C92-DC3F-4B55-AE5B-811EE82398AD}
and APPID
{37399C92-DC3F-4B55-AE5B-811EE82398AD}
to the user DESKTOP-859P73F\Admin SID (S-1-5-21-2397042186-3615143847-2771988828-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.XboxGamingOverlay_5.823.7272.0_x64__8wekyb3d8bbwe SID (S-1-15-2-1714399563-1326177402-2048222277-143663168-2151391019-765408921-4098702777). This security permission can be modified using the Component Services administrative tool."

(Also lists the same GUID)

Warning 10016 DistributedCOM:
"The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user DESKTOP-859P73F\Admin SID (S-1-5-21-2397042186-3615143847-2771988828-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Also lists the same GUID.

There's probably more.

BTW I'm a little out of my depth here. I had been using ChatGPT to help diagnose this. It wanted me to grant permissions for the CLSID's listed but I wasn't able to do that due to the aforementioned reasons.


Windows version: 10.0.19045 Build 19045

Edit: Also whenever I run dcomcnfg I get half a dozen-ish errors in event viewer that say
7024 Service Control Center:
"The Distributed Transaction Coordinator service terminated with the following service-specific error:
%%3221229584"