Windows 10: Windows 10 Event ID 10010 and 10016 Errors With DistributedCOM

Page 12 of 28 FirstFirst ... 2101112131422 ... LastLast
  1.    25 Sep 2016 #111

    Hi,

    The link provided is valid for XP OS.
    The event viewer error in W10 refers to Windows Insider service and afaik only needs local permissions set not the remote ones.

    Cheers,
      My ComputersSystem Spec


  2. Posts : 99
    Dual-boot Win 7 & 10, both Pro 64-bit
       01 Oct 2016 #112

    Well, here's a doozy. This error 10016 came up again, but there is no item in DCOM Config that matches the CLSID or APPID. The registry keys exist, and I got "Done" after running the powershell script, but where's the DCOM item?

    The error is this:

    Log Name: System
    Source: Microsoft-Windows-DistributedCOM
    Date: 10/1/2016 5:24:31 PM
    Event ID: 10016
    Task Category: None
    Level: Error
    Keywords: Classic
    User: SYSTEM
    Computer: DESKTOP-3OLB09N
    Description:
    The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
    and APPID
    {F72671A9-012C-4725-9D2F-2A4D32D65169}
    to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2016-10-01T21:24:31.568345300Z" />
    <EventRecordID>1460</EventRecordID>
    <Correlation />
    <Execution ProcessID="916" ThreadID="948" />
    <Channel>System</Channel>
    <Computer>DESKTOP-3OLB09N</Computer>
    <Security UserID="S-1-5-18" />
    </System>
    <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}</Data>
    <Data Name="param5">{F72671A9-012C-4725-9D2F-2A4D32D65169}</Data>
    <Data Name="param6">NT AUTHORITY</Data>
    <Data Name="param7">SYSTEM</Data>
    <Data Name="param8">S-1-5-18</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">Unavailable</Data>
    </EventData>
    </Event>

    The problem is that CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} points to "CDP Activity Store", and there is no "CDP Activity Store" in DCOM Config.

    What to do?

    Thanks.
      My ComputerSystem Spec

  3.    01 Oct 2016 #113

    Hi,

    The problem is that CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} points to "CDP Activity Store", and there is no "CDP Activity Store" in DCOM Config.
    The quoted hive key is the DCOM item you'll find in DCOMCNFG :

    F72671A9-012C-4725-9D2F-2A4D32D65169
    You'll need to add the SYSTEM account.

    You can configure it just like any other DCOM object once you've granted the Administrators group rights to do so through Regedit.exe.
    Keep in mind that the first hive key needs to be reset to SYSTEM, the second to Trusted Installer.

    Sorry for keeping it short, I have a broken wrist so typing isn't easy to do.

    Best,
      My ComputersSystem Spec


  4. Posts : 99
    Dual-boot Win 7 & 10, both Pro 64-bit
       01 Oct 2016 #114

    fdegrove - sorry to hear about the wrist! Please use any other available appendage and don't worry about spelling or punctuation!

    FIRST - I found the APPID number at the bottom of the DCOMs just as you said. But when I tried to Add "NT AUTHORITY\SYSTEM SID (S-1-5-18)", it failed. (See screenshot below, which might be too small.)
    So instead I added "SYSTEM" and gave it both Local Launch and Local Activation. Is that it? Or should I have Added something else?

    SECOND - I don't know what you mean by "Keep in mind that the first hive key needs to be reset to SYSTEM, the second to Trusted Installer." Doesn't the powershell script take care of that? If not, what should I do?

    Pound away, old man! Many thanks.

    Click image for larger version. 

Name:	2016_10_01_22_25_581.png 
Views:	111 
Size:	9.6 KB 
ID:	104029
      My ComputerSystem Spec

  5.    01 Oct 2016 #115

    Hi,

    Thx for the heads up.

    FIRST - I found the APPID number at the bottom of the DCOMs just as you said. But when I tried to Add "NT AUTHORITY\SYSTEM SID (S-1-5-18)", it failed. (See screenshot below, which might be too small.)
    So instead I added "SYSTEM" and gave it both Local Launch and Local Activation. Is that it? Or should I have Added something else?
    This : AUTHORITY\SYSTEM equals this: SYSTEM so you're good on that one.

    SECOND - I don't know what you mean by "Keep in mind that the first hive key needs to be reset to SYSTEM, the second to Trusted Installer." Doesn't the powershell script take care of that? If not, what should I do?
    When you're done editing DCOM you need to check the corresponding hive keys for correct ownership running regedit.exe.
    The first hive key in Event viewer is owned by SYSTEM , the second by Trusted Installer.

    I am not sure the Powershell script takes care of that in this particular case.

    Cheers,
      My ComputersSystem Spec


  6. Posts : 99
    Dual-boot Win 7 & 10, both Pro 64-bit
       01 Oct 2016 #116

    fdegrove - In regedit now:

    {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} is owned by TrustedInstaller
    and
    {F72671A9-012C-4725-9D2F-2A4D32D65169} is also owned by TrustedInstaller

    Should one of them be changed?
      My ComputerSystem Spec

  7.    01 Oct 2016 #117

    Hi,

    {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} is owned by TrustedInstaller
    Yep. That one should be owned by SYSTEM actually.

    Cheers,
      My ComputersSystem Spec


  8. Posts : 99
    Dual-boot Win 7 & 10, both Pro 64-bit
       01 Oct 2016 #118

    On your system, is it owned by SYSTEM?
    I ask only because I vaguely recall looking before starting an hour ago, and I vaguely recall TrustedInstaller.
    Could I ask you to check? Sorry!
    And since you are in Belgium, je m'excuse mille fois.
      My ComputerSystem Spec

  9.    01 Oct 2016 #119

    Hi,

    On your system, is it owned by SYSTEM?
    Yes, it is and that is how it was before I edited it.

    And since you are in Belgium, je m'excuse mille fois.
    Il n'y a pas de soucis.

    Bonne chance,
      My ComputersSystem Spec


  10. Posts : 99
    Dual-boot Win 7 & 10, both Pro 64-bit
       01 Oct 2016 #120

    Should I replace owner on subcontainers and objects? See screenshot.
    Attached Thumbnails Attached Thumbnails 2016_10_02_00_22_571.png  
      My ComputerSystem Spec


 
Page 12 of 28 FirstFirst ... 2101112131422 ... LastLast

Related Threads
Event 10016, DistributedCOM in Performance & Maintenance
Since upgrading to Windows 10, my error log is flooded with this message. Over 520 incidents in the past week. The instructions provided for that error in Windows 8 do not work with 10, since it is impossible to grant full permission to the...
Weird event viewer errors in Performance & Maintenance
Hello, Event Viewer is showing the following errors: The User Data Storage_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service. The User...
This appears to be a general issue with windows 10, I always get the following errors on shutdown: The VMware Workstation Server service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000...
Worried about event viewer errors in Performance & Maintenance
hi guys managed to install windows 10 and everything seems to be working great. I looked in event viewer and I'm getting loads of errors, the same over and over. one is that keeps coming up is kernel-power event id 137 The system...
ESENT errors in my Event Log in BSOD Crashes and Debugging
On Windows 10 Pro x64 I am getting quite a few ESSENT errors in my Event Log after I start up W10. I see Event ID's 413, 455, 488, and 489. If these are indicative of a problem does anyone know the fix? Thanks
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 09:38.
Find Us