Event ID 10016, DistributedCOM

Shortly after applying the 'Fix', I've started getting randomly the two following warning events in sequence:

a) EventID: 4350

Cluster API call failed with error code: 0x800706D9. Cluster API function: OpenClusterEx Arguments: lpszClusterName: (null)

b) EventID: 4879

MSDTC encountered an error (HR=0x80000171) while attempting to establish a secure connection with system <Computer Name>.

Allowing 'Local Launch', in addition to 'Local Activation', solved the problem. So far, no other side effects.

Not seen that here (yet!)

As far as I can understand, those two events are triggered off when the Server is being activated before having been launched first. Also, the outcome is that, under normal conditions, the Microsoft Distributed Transaction Coordinator (MSDTC) service establishes a secure connection with the local System (Computer), not with a remote Server or whatever (the DTC Security settings do not allow this last type of connections). What for? I don't know but, in my case, I suspect it is related to MS Store Apps somehow. Security breach? Maybe yes, maybe not... Anyway I'm already used to this kind of situations whenever there is an OS upgrade (not update) when I have to spend a couple of hours trying to get rid of unwanted and meaningless Events. In what concerns the present situation, I think it's nothing but a MS bug, sometimes known as an 'Undocumented Feature'. IMHO.

fdegrove - you helped me with my first 10016 problem years ago, elsewhere in this forum, but I think this thread and your posts here mean that the problem has gotten worse in Win 10. Just want to confirm your advice in this thread not to try to fix this one.

Have had Win 10 Pro 64-bit for a while. Since upgrading two months ago from version 1709 to 1803, I get these error messages once every four hours:

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
and APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
to the user DESKTOP-3*****N\[My Name] SID (S-1-5-21-3591163430-416291016-3566129944-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). This security permission can be modified using the Component Services administrative tool.

The AppID is for Windows Management and Instrumentation. Using the old techniques, I added both myself and SYSTEM to the DCOM - Security - Launch and Activation with both SYSTEM and myself as checked for Local Launch and Local Activation, but the Error messages keep coming.

I think your advice here is forget about it, but please confirm.

Did this problem get worse because it is now

... running in the application container Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723) ...

?
Hey - since I have you on the phone - I have an AUDIT FAILURE issue on every reboot since upgrading to 1803, and I posted all the details in this forum at Audit failures every reboot - Event 5061 - Cryptographic operation.
Would you take a look? Thanks.

Hi,
@glnz

Sorry to hear the problem is still persisting. You could go to the usual steps again and once you can edit dcomcnf you could try to grant "local activation" and "local launch" to "Local Service".
Restart and check if the error has vanished. I'll keep my fingers crossed.

Personally I no longer have that error on my systems but then they're all running W10 1903. Which also suffers from DCOM errors but these are far more easily fixed.

Cheers,

fdegrove - thanks - added Local Service and we'll see. Maybe I should also add the new Q subway line to 96th Street.
Anyway, did you see my extra request: Hey - since I have you on the phone - I have an AUDIT FAILURE issue on every reboot since upgrading to 1803, and I posted all the details in this forum at Audit failures every reboot - Event 5061 - Cryptographic operation.
Would you take a look? Thanks.

Sorry - adding Local Service didn't help - still getting these particular Event 10016 errors about every four hours.

Hi,

That would drive me nuts. Sorry for not being able of offering you a fix on this one.

Cheers,