Event ID 10016, DistributedCOM Windows.SecurityCenter.WscBrokerManager

Greetings.

Updated to 1803 17134.1 without a problem but one error - Distributed COM event ID 10016.
Experienced this event ID many times previously and have fixed by changing permissions in Registry but this one has no known CLSID/APPID.

"The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

Code:

-
System


  


 
-
Provider


  



[  Name]
Microsoft-Windows-DistributedCOM


 



[  Guid]
{1B562E86-B7AA-4131-BADC-B6F3A001407E}


 



[  EventSourceName]
DCOM




 


 
-
EventID
10016


  



[  Qualifiers]
0




 


 

Version
0




 


 

Level
2




 


 

Task
0




 


 

Opcode
0




 


 

Keywords
0x8080000000000000




 


 
-
TimeCreated


  



[  SystemTime]
2018-05-01T13:13:11.470871100Z




 


 

EventRecordID
1072




 


 

Correlation




 


 
-
Execution


  



[  ProcessID]
512


 



[  ThreadID]
1876




 


 

Channel
System




 


 

Computer
:)




 


 
-
Security


  



[  UserID]
S-1-5-18





 
-
EventData


  


param1
application-specific


 


param2
Local


 


param3
Launch


 


param4
Windows.SecurityCenter.WscBrokerManager


 


param5
Unavailable


 


param6
NT  AUTHORITY


 


param7
SYSTEM


 


param8
S-1-5-18


 


param9
LocalHost (Using  LRPC)


 


param10
Unavailable


 


param11
Unavailable

I am guessing this is nothing serious but I just can not stand an error showing in Event Viewer.
Your advises much appreciated.

:)

Search for the GUID in regedit.exe instead. You may learn something interesting. That's about all you have to go on, really.
HTH,
--Ed--

Sounds like we might all learn something from your further investigations. Do keep us posted, please. Best of luck in running this to ground.
--Ed--

nyan said:

Greetings.

Updated to 1803 17134.1 without a problem but one error - Distributed COM event ID 10016.
Experienced this event ID many times previously and have fixed by changing permissions in Registry but this one has no known CLSID/APPID.

Confirming. 1803 Pro here; same error message. Past 'mega threads' on 10016 did not address the error where no CLSID/APPID is shown. This is new with 1803.

You might want to do a search on these forums for other threads, there have been a couple of mega threads in the past relating to this error.