Event ID 10016, DistributedCOM Windows.SecurityCenter.WscBrokerManager Solved

Page 3 of 3 FirstFirst 123
  1. EyeInTheSky's Avatar
    Posts : 390
    Windows 10 Home x64 - Version 1809 (OS Build 17763.379)
       #21

    Fredrik said: View Post
    Let me guess: RuntimeBroker, Local Activation?

    Hey Fredrik, the new 10016 errors are showing as Microsoft-Windows-Distributed.Com in the registry if you look up the AppID's and GUID's. Funny thing is though, if you go to Component Services to find the corresponding service, it isn't there by that name.

    You have found the fix before; although I feel this one will be a little harder to isolate unless you happen to know another name the Microsoft-Windows-Distributed.Com error goes by in Component Services.

    I just cleared my "Event Viewer", so I'll have to wait until it happens again to get you more information. I didn't see anything relating to RuntimeBroker with the new 10016 errors, but I do remember something about Local Activation if I recall the error right.
    Last edited by EyeInTheSky; 21 Jan 2019 at 11:33. Reason: Correction.
      My ComputerSystem Spec

  2.    #22

    Fredrik said: View Post
    My particular suggestion was the fix for Windows Security Center. Then if you have other events ID 10016 you have to deal with them in another way. I can't see from your image above what the errors are about. Let me guess: RuntimeBroker, Local Activation?
    I don't think it's RuntimeBroker. Take a look at a recent one:
    Click image for larger version. 

Name:	Windows 10 DCom error 10016.png 
Views:	5 
Size:	14.7 KB 
ID:	221682
      My ComputersSystem Spec

  3.    #23

    speedlever said: View Post
    I don't think it's RuntimeBroker. Take a look at a recent one:
    Click image for larger version. 

Name:	Windows 10 DCom error 10016.png 
Views:	5 
Size:	14.7 KB 
ID:	221682
    That APPID is "Windows Management and Instrumentation" (WMI). I guess you could try to grant Local Activation on WMI in dcomcnfg for SID (S-1-15-2-350187224-..... the whole SID) or if that doesn't work grant Local Activation for 'ALL APPLICATION PACKAGES'.

    You know already, I guess, that you first must give Administrators full access to both APPID and CLSID in registry?

    Then again - granting activation access for ALL APPLICATION PACKAGES...? I am not sure it's wise or not but it would get rid of your error. The ContentDeliveryManager is the process that updates the content of your APPS. I can't answer why it think it needs access to WMI.
      My ComputersSystem Spec

  4.    #24

    thanks. perhaps i'll just leave it alone.
      My ComputersSystem Spec

  5.    #25

    Fredrik said: View Post
    Hi,
    You solve this by changing the service wscsvc from delayed autostart to normal autostart. You don't (normally) have permission to do it from the services app so you must do it in the registry.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc
    Change the DWORD DelayedAutoStart from 1 to 0.
    /Fredrik
    Thanks Fredrik; i don't know how you found / invented this solution (trying out?), but it works indeed. Fantastic!!
      My ComputerSystem Spec


  6. Posts : 1
    Windows 10 LTSC
       #26

    Fredrik said: View Post
    Hi,

    I have read here and in many other places to suppress event 10016. That is, if you as me, a bad approach.

    In this case, with Windows.SecurityCenter it is not as easy to fix as the old classics with the RuntimeBroker, ShellWindows etc which is solved by giving full rights to Administrator in registry and then give SYSTEM, Local Service or whatever launch permissions in DCOM Config. The reason is that you, in this case, don't have any ApplicationId to play around with.

    The problem in this case is that the service for Windows SecurityCenter (wscsvc) have a delayed autostart while "things" like the WscBrokerManager and WscCloudBackupProvider tries to initiate very early in the startup process. It will fail with error event 10016. wscsvc will initiate after ~2 minutes and then everything will be instantiated as normal so you will have no side effects of these errors in the event log but it's annoying.

    You solve this by changing the service wscsvc from delayed autostart to normal autostart. You don't (normally) have permission to do it from the services app so you must do it in the registry.

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc

    Change the DWORD DelayedAutoStart from 1 to 0.

    Have a nice day!
    /Fredrik
    This actually solved my dcom errors realted to windows security center...thanks
      My ComputerSystem Spec


 
Page 3 of 3 FirstFirst 123

Related Threads
I am having a number of events that seem to be located repeatedly with the source: DistributedCOM Event ID: 10010 and Event ID: 10016 also getting repeatedly Service Control Manager Event ID: 7031
DistributedCom 10016 permissions event error in Performance & Maintenance
This is a repeating error since the 1709 update. I edited and applied the permission change according to description posted in one of these subforums. That solved that particular application CLSID and APPID Another with a slightly different ID...
Event 10016, DistributedCOM in Performance & Maintenance
Since upgrading to Windows 10, my error log is flooded with this message. Over 520 incidents in the past week. The instructions provided for that error in Windows 8 do not work with 10, since it is impossible to grant full permission to the...
I do THANK all whom has helped me on my memory DUMp Error it was bad memory!!T This has happened serval time this month so far Now I have one more BSOD error details in ZIP thanks for all the Help :( Error 9/22/2015 3:40:32 PM...
Hello fellow forum users I am not sure where to begin but I'll start out by saying that I have been googling this one for a few days now. Followed the guides I've found and have not had success fixing this event. Problem: Windows 10's event...

Tags for this Thread

Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 02:57.
Find Us