Why Certain DCOM 10016 Events Don't Matter

Page 1 of 7 123 ... LastLast

  1. Posts : 4,224
    Windows 10
       #1

    Why Certain DCOM 10016 Events Don't Matter


    Here at TenForums.com we get lots of questions about Event ID 10016, which shows up in Event Viewer on nearly all Windows 10 PCs (and in modern Server versions as well, as it turns out). People who post these questions may even be irritated or upset. Usually, they want to make those events go away, and absent themselves from the Event log.

    Thanks to some excellent sleuthing work from long-time member @f14tomcat, I can cite a Microsoft Support Note to explain that these events are perfectly normal. In fact, they do not need to be fixed, removed, or otherwise mitigated. The title of the note is "DCOM event ID 10016 is logged in Windows." As I write this post, the note reports it was last updated on April 30, 2018. It also reports that it applies to the following Windows versions:

    Windows Server version 1803, Windows 10 version 1803, Windows 10 version 1709, Windows 10 Version 1703, Windows 10 Version 1607, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Server 2016 Standard edition Nano Server installation option, Windows Server 2016 Datacenter edition Nano Server installation option, and Windows Server 2016 Essentials
    How can I assert that certain DCOM 10016 events don't matter? Because the note makes it clear that any such events that mention "application-specific settings do not grant Local Activation permission" are normal for the afore-cited Windows versions. Here's the meaty part of the Support Note that explains things completely:

    Cause
    These 10016 events are recorded when Microsoft components tries to access DCOM components without the required permissions. In this case, this is expected and by design. A coding pattern has been implemented where the code first tries to access the DCOM components with one set of parameters. If the first attempt is unsuccessful, it tries again with another set of parameters. The reason why it does not skip the first attempt is because there are scenarios where it can succeed. In those scenarios, that is preferable.

    Workaround
    These events can be safely ignored because they do not adversely affect functionality and are by design. This is the recommended action for these events.


    What if I MUST Silence These Events Anyway?
    Some Windows 10 users won't like or care about this explanation. They simply won't settle for anything less than a clean Event Viewer on their PCs.

    For such folks, the note provides instructions on how to suppress those events in the Event Viewer "by creating a filter and manually editing the filter's XML query." Please consult the Note for detailed instructions. Please also be aware that if you choose to silence these events, you won't be informed if a real, noteworthy DCOM event occurs on your system. If you search these Forums, you can also find other ways to handle these events, too. These include editing the registry to suppress DCOM events completely (subject to the same observation about cutting oneself off from information about real errors), and changing permissions to grant the necessary system components the ability to alter DCOM component data (this is the safest way to prevent those events from recurring, but must be repeated for each feature upgrade that comes along).

    For the rest of us -- including me -- we can safely and completely ignore those events. They do not indicate problems or trouble, and occur by deliberate design.

    HTH,
    --Ed--



    Last edited by EdTittel; 12 May 2018 at 09:53.
      My Computers


  2. KCR
    Posts : 355
    Windows 10 Home, 64-bit, Version 22H2 (OS Build 19045.4170)
       #2

    Why Certain DCOM 10016 Events Don't Matter


    Great ! !

    Ed and f14tomcat, thanks for that. . .
      My Computers


  3. Posts : 4,224
    Windows 10
    Thread Starter
       #3

    Yes, I had an "Aha!" moment as soon as I saw the MS Support Note on the topic. That's why I volunteered to write this up as a 'sticky post' for this forum. Glad you found it useful/informative.
    Best wishes,
    --Ed--
      My Computers


  4. Posts : 56,804
    Multi-boot Windows 10/11 - RTM, RP, Beta, and Insider
       #4

    KCR said:
    Great ! !

    Ed and f14tomcat, thanks for that. . .
    You're most welcome! Hope it helps a bit. :)
      My Computers


  5. Posts : 2,450
    Windows 10 Pro x64
       #5

    @EdTittel Dick @f14tomcat

    Guys, Thanks a lot for this! I've been battling this thing for years..(that's how I got to "meet" Dick!)
    I have been using dcomperm (a Microsoft cli utility, to change the permissions, and of course I was doing it after every feature upgrade!)

    Finally I'll stop and ignore the damn errors!!!

    BTW, was it that difficult for Microsoft to inform us of the cause, earlier....?
      My Computer


  6. Posts : 56,804
    Multi-boot Windows 10/11 - RTM, RP, Beta, and Insider
       #6

    ddelo said:
    @EdTittel Dick @f14tomcat

    Guys, Thanks a lot for this! I've been battling this thing for years..(that's how I got to "meet" Dick!)
    I have been using dcomperm (a Microsoft cli utility, to change the permissions, and of course I was doing it after every feature upgrade!)

    Finally I'll stop and ignore the damn errors!!!

    BTW, was it that difficult for Microsoft to inform us of the cause, earlier....?
    @ddelo
    Glad it eased the stress, Dimitri, least on this one!
      My Computers


  7. Posts : 7,860
    Windows 11 Pro 64 bit
       #7

    These 'errors' can be fixed but who knows what other issues you are creating by trying to fix them even by approved methods? I think it's best just to ignore these 'errors'.
      My Computers


  8. Posts : 4,224
    Windows 10
    Thread Starter
       #8

    Steve C said:
    These 'errors' can be fixed but who knows what other issues you are creating by trying to fix them even by approved methods? I think it's best just to ignore these 'errors'.
    I agree on the "it's best just to ignore these errors." That's why I posted this thread and asked @Brink to make it a sticky. I believe he agrees as well, and that explains its sticky status!
    --Ed--
      My Computers


  9. Posts : 6
    Windows 10
       #9

    I tried do manually fix the dcom permissions via component services and i didnt help either. It is just time consuming and fixes nothing for me
      My Computer


  10. VBF
    Posts : 602
    Win 10 Pro
       #10

    I suddenly started getting these errors on just one of my systems and went searching for a solution. i'd already found the note mentioned in the OP of the thread "DCOM event ID 10016 is logged in Windows." and then I found this thread.

    I'm "bumping" this thread just to mention that the note was updated pretty recently - 2nd October 2018.

    I shall therefore assume that the problem is still extant and that, after reading this thread, the best procedure is to ignore it.
    Unless anyone has any better ideas of course?
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 00:30.
Find Us




Windows 10 Forums