New
#1
Event ID 10016, DistributedCOM Windows.SecurityCenter.WscBrokerManager
Greetings.
Updated to 1803 17134.1 without a problem but one error - Distributed COM event ID 10016.
Experienced this event ID many times previously and have fixed by changing permissions in Registry but this one has no known CLSID/APPID.
"The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."
Code:
- System
- Provider
[ Name] Microsoft-Windows-DistributedCOM
[ Guid] {1B562E86-B7AA-4131-BADC-B6F3A001407E}
[ EventSourceName] DCOM
- EventID 10016
[ Qualifiers] 0
Version 0
Level 2
Task 0
Opcode 0
Keywords 0x8080000000000000
- TimeCreated
[ SystemTime] 2018-05-01T13:13:11.470871100Z
EventRecordID 1072
Correlation
- Execution
[ ProcessID] 512
[ ThreadID] 1876
Channel System
Computer :)
- Security
[ UserID] S-1-5-18
- EventData
param1 application-specific
param2 Local
param3 Launch
param4 Windows.SecurityCenter.WscBrokerManager
param5 Unavailable
param6 NT AUTHORITY
param7 SYSTEM
param8 S-1-5-18
param9 LocalHost (Using LRPC)
param10 Unavailable
param11 Unavailable
I am guessing this is nothing serious but I just can not stand an error showing in Event Viewer.
Your advises much appreciated.
:)
Last edited by Brink; 01 May 2018 at 09:18. Reason: code box