10016 Warnings for PerAppRuntimeBroker but Windows Security warnings

no1yak70 · 24 Feb 2020

lqlaow said:

it does it with vivaldi too. how do remove this message? I already have all the admin rights to start the dcom thing

Same error here with Chrome Edge as soon as I launch the browser and Firefox but only when surfing Amazon Prime video and Netflix. Have set DCOM PerAppRuntimeBroker to Local Service but still this error persists.

BLaZiNgSPEED · 24 Feb 2020

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System\{1b562e86-b7aa-4131-badc-b6f3a001407e}]
"Enabled"=dword:00000000
"EnableLevel"=dword:00000000
"LoggerName"="EventLog-System"
"MatchAnyKeyword"=hex(b):00,00,00,00,00,00,00,80
"MatchAllKeyword"=hex(b):00,00,00,00,00,00,00,00
"EnableProperty"=dword:00000001
"Status"=dword:00000000

Just go to this and set the Enable value to a 0 and these warnings will go away. All Windows 10 systems have this issue and there's nothing else you can do about it.

All these months I have never had this show up in the Event Viewer anymore.

EyeInTheSky · 24 Feb 2020

The way I determine if these Event Viewer Errors are a threat is based on the predication that if (and only if) the errors are causing system instability. If the errors do not interfere with normal system stability, let it fill up the Event Viewer, because that is the only thing that the error is really capable of and I have never seen a thread where someone pointed out that their Event Viewer can't store any more reporting errors.

All rhetoric aside, their are three options, but only one makes sense, if and only if, it is not causing system instability. I have never seen someone come back and report : "Hey, you know what?" "I cleared a RuntimeBroker Error and my computer performed a 100% better."

That is because they choose to hide the error versus actually fixing it, and even then, the computer performed no better.

Those errors being reported are considered "Ghosts in the Machine" meaning they are random segments of code that produce errors because they don't fit in the equation of normal system operation. It is like having a scratch-pad handy to jostle down notes. The random segments of code have to go somewhere, and the Event Viewer is the scratch-pad in this case.

The Event Viewer is nothing more than a Recycle Bin for random segments of code that only really come in handy when system instability is a problem - But hey, even then, there are far more elaborate tests that can be run like the Log Collector among other tools that more reliably pinpoint the actual problem if system instability is evident.

lqlaow · 09 Mar 2020

so here there is the correct solution
Windows 10 October 2018 Update rollout now paused

[EDIT]: I just realized that the RuntimeBroker has changed reg keys in 1809. It's now called:
CLSID: 2593F8B9-4EAF-457C-B68A-50F6B8EA6B54
APPID: 15C20B67-12E7-4BB6-92BB-7AFF07997402

If you use Google Chrome I advise to allow Local Activation for 'Users' since Chrome execute in a User role sandbox and otherwise triggers an error every time it is started.

it is really ''USERS'', or more precisely ''name of the machine''\USERS which must get the local activation. I tried with name of the machine'\my name and it does not work, but with the generic USERS, chrome no longer triggers the error.

csmdew · 16 Oct 2021

I know this is old thread but the advice to use "users\name" worked perfectly and stopped the 10016 nag. Thanks Iglaow

glnz · 17 Oct 2021

csmdew and lqlaow - I'm the OP. Interesting and thanks for your posts.

lqlaow's link might not work now -- try this one -- Windows 10 October 2018 Update rollout now paused

BUT ... what does this PerAppRuntimeBroker actually do? What is it trying to run?

AND ... please see my original post at the top of this thread. What happens if I hit "Remove" anyway? If something goes wrong, how do I undo it? This post is originally about not knowing what happens after hitting "Remove".

ALSO - can you both give me an example of ''name of the machine''\USERS ? What exactly is the name of my machine for these purposes?

Thanks.

csmdew · 17 Oct 2021

your machine name can be found under settings/system/about and top line says device name. that is the machine's name and actually the correct order is as an example, "Users\CSMDEW".

lqlaow · 18 Oct 2021

glnz said:

csmdew and lqlaow - I'm the OP. Interesting and thanks for your posts.

lqlaow's link might not work now -- try this one -- Windows 10 October 2018 Update rollout now paused

BUT ... what does this PerAppRuntimeBroker actually do? What is it trying to run?

AND ... please see my original post at the top of this thread. What happens if I hit "Remove" anyway? If something goes wrong, how do I undo it? This post is originally about not knowing what happens after hitting "Remove".

ALSO - can you both give me an example of ''name of the machine''\USERS ? What exactly is the name of my machine for these purposes?

Thanks.

''name of the machine'' is hostname, so open a command line and type ''hostname''
https://developerpublish.com/3-ways-to-find-the-computer-name-from-command-line-in-windows-10/

csmdew · 18 Oct 2021

ok, do it the hard way, for non tech savvy.

BLaZiNgSPEED · 20 Oct 2021

lqlaow said:

so here there is the correct solution
Windows 10 October 2018 Update rollout now paused

it is really ''USERS'', or more precisely ''name of the machine''\USERS which must get the local activation. I tried with name of the machine'\my name and it does not work, but with the generic USERS, chrome no longer triggers the error.

Many thanks for finding the solution! I didn't know it is Chromium web browsers that trigger this error/warning.
Yes, I am getting this. The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user DESKTOP-22C5PHI\Rahul SID (S-1-5-21-676720327-1014658904-1421798105-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

I can attest that using Opera GX, does trigger these warnings. But using Waterfox Classic does not cause the error to trigger!
Can you explain where I have to select the local activation Users name? Is it from the Google Chrome/Opera GX Browser or do I go to Component Services administrative tool area?

It would be useful if there were illustrations made through print screen pictures or a youtube video that show us how to do this, as not many of us are technically knowledgeable on how to follow these steps. From where do I select generic username for the local activation?

Kind regards.