Windows 10 Event ID 10010 and 10016 Errors With DistributedCOM

Hi,

My sub-question is: why does it say "running in the application container Unavailable SID (Unavailable)"? Should I do anything special because it's "Unavailable SID (Unavailable)"?

No, the APPID hive key is the same as the container ID you'll find at the bottom in DCOM's console.

{F72671A9-012C-4725-9D2F-2A4D32D65169}

Cheers,

Same problem here, with a complication. The registry fix for the missing local activation permission on CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} seems to have taken effect, but when I go into DCOMCNFG to fix the problem with AppID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}, I get stopped when I get to the security tab to edit the launch and activation permissions with the following message:

One or more of the permissions entries attached to registry value has an unrecogninzed or application-specific (callback) type and cannot be displayed.
To remove the unrecognized and callback permission entries, click Remove...
To leave permissions unchanged and display only the recognized permission entries in read-only view, click Cancel.

The first time I tried this, I stupidly selected remove, which resulted in an unresponsive start button and task bar. After a repair install of Windows, going through the same process but responding by clicking on cancel brings up only two groups named ALL APPLICATION PACKAGES and SELF. Both have only local launch and local activation allowed. (Add and Remove buttons and permissions checkboxes are all grayed-out.)

Since I can't change permissions or objects on the Runtime Broker this way without borking up the whole operating system, I'm very open to any suggestions on how to proceed. Sorry if this is repetitive. If this had been talked about before, could you kindly point me to that post. Otherwise, any ideas?

Regards,
Crashman

I am getting the usual 10016 error 8D8F4F83-3594-4F07-8369-FC3C3CAE4919 CLSID after a clean install, but today I seen a list of seven 10016 errors with C2F03A33-21F5-47FA-B4BB-156362A2F239 CLSID that logged two minutes after boot. After a restart only the first 10016 error appeared again.

1607 14393.51

Code:

	

		

			

			
				

					 Marco83 said: 
				
				
Thank you for the very insightful and kind reply. Now I think I do understand the procedure a lot better. Maybe I am a tad too concerned, but I would not like to break anything important, and end up with an unstable system.

Thus, let me rely on your guidance and deep knowledge once more, granted and hoping you have the time and patience to help me out. It is truly appreciated.

Can you please verify that the following passages, specific to my case, are in fact accurate? Thanks for all of the precious advise you provide, to myself and others.



A. First DistributedCOM error with Event ID 10016



Attachment 93536


	
Code:
	
The application-specific permission settings do not grant Local Activation permission 
for the COM Server application 
with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SID SYSTEM (S-1-5-18) from address LocalHost (Using LRPC) 
running in the application container Unavailable SID (Unavailable). This security 
permission can be modified using the Component Services administrative tool.


Attachment 93537

Attachment 93538



CLSID: {D63B10C5-BB46-4990-A94F-E40B9D520160}

APPID: {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

User: SYSTEM   or   NT AUTHORITY\SID SYSTEM (S-1-5-18)

Application: RuntimeBroker



1- Open Regedit with Administrative rights

2- Navigate to HKEY_CLASSES_ROOT > CLSID > {D63B10C5-BB46-4990-A94F-E40B9D520160}

3- Right-click on it and select "Permissions..." option

4- In the new dialog box Attachment 93543 (image from my machine) click on "Advanced" button

5- At the top, look for "Owner" and click on "Change" button near "TrustedInstaller"

6- In the new dialog box type "Administrators" and click on "Check Names" button (it supposedly converts the name to correct format)

7- Click on "OK" button

8- Select "Administrators" in the first dialog box and check the "Allow" checkbox given for "Full Control" option

9- Click on "Apply" and "OK" buttons

10- Navigate to HKEY_CLASSES_ROOT > APPID > {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

11- Repeat passages #3-#9

12- Close Regedit

13- Open Component Services with Administrative rights

14- Browse to Console Root > Component Services > Computers > My Computer > DCOM Config

15- Find "RuntimeBroker" from the icon list, right click on it and select "Properties"

16- Navigate to the "Security" tab and click the "Edit" button in the "Launch and Activation Permissions" section

17- In the newly opened dialogue box (Launch and Activation Permission), If "SYSTEM" is missing from the "Group or user names" list section proceed to #18, otherwise skip to #21

18- Click the "Add" button

19- Type in "SYSTEM", that is the User as found per Event ID 10016 from Event Viewer, and click on "Check Names" button (it supposedly converts the name to correct format)

20- Click the "OK" button. You're back in "Launch and Activation Permission" dialogue box

21- Select "SYSTEM" from the "Group or user names" list, and click to place a check in the "Local Activation"/"Allow" box

22- Click the "OK" button

23- Back in the "Security" tab, click the "Apply" button, then keep clicking "OK" until all windows are closed

24- Open Regedit with Administrative rights

25- Reassign ownership back to default "TrustedInstaller" for the two modified CLSID and APPID values

26- In order to do so, type "NT SERVICE\TrustedInstaller" (without quotes) in the dialogue box mentioned at #6, and click the "OK" button

27- Close all windows and exit Regedit

28- Reboot



B. Second DistributedCOM error with Event ID 10016



Attachment 93546


	
Code:
	
The application-specific permission settings do not grant Local Activation permission 
for the COM Server application 
with CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
and APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
to the user portatile_Asus\SID Marco (S-1-5-21-3351707439-3826623186-4039555236-1002) 
from address LocalHost (Using LRPC) 
running in the application container 
Microsoft.Windows.FeatureOnDemand.InsiderHub_10.0.10586.0_neutral_neutral_cw5n1h2txyewy 
SID 
(S-1-15-2-4016783169-893401051-2237370320-274899566-412088533-2398988950-2155762795). 
This security permission can be modified using the 
Component Services administrative tool.


Attachment 93547

Attachment 93548



CLSID: {C2F03A33-21F5-47FA-B4BB-156362A2F239}

APPID: {316CDED5-E4AE-4B15-9113-7055D84DCC97}

User: portatile_Asus\Marco or portatile_Asus\SID Marco (S-1-5-21-3351707439-3826623186-4039555236-1002)

Application: Immersive Shell



1- Open Regedit with Administrative rights

2- Navigate to HKEY_CLASSES_ROOT > CLSID > {C2F03A33-21F5-47FA-B4BB-156362A2F239}

3- Right-click on it and select "Permissions..." option

4- In the new dialog box Attachment 93543 (image from my machine) click on "Advanced" button

5- At the top, look for "Owner" and click on "Change" button near "TrustedInstaller"

6- In the new dialog box type "Administrators" and click on "Check Names" button (it supposedly converts the name to correct format)

7- Click on "OK" button

8- Select "Administrators" in the first dialog box and check the "Allow" checkbox given for "Full Control" option

9- Click on "Apply" and "OK" buttons

10- Navigate to HKEY_CLASSES_ROOT > APPID > {316CDED5-E4AE-4B15-9113-7055D84DCC97}

11- Repeat passages #3-#9

12- Close Regedit

13- Open Component Services with Administrative rights

14- Browse to Console Root > Component Services > Computers > My Computer > DCOM Config

15- Find "Immersive Shell" from the icon list, right click on it and select "Properties"

16- Navigate to the "Security" tab and click the "Edit" button in the "Launch and Activation Permissions" section

17- In the newly opened dialogue box (Launch and Activation Permission), If "portatile_Asus\Marco" is missing from the "Group or user names" list section proceed to #18, otherwise skip to #21

18- Click the "Add" button

19- Type in "portatile_Asus\Marco", that is the User as found per Event ID 10016 from Event Viewer, and click on "Check Names" button (it supposedly converts the name to correct format)

20- Click the "OK" button. You're back in "Launch and Activation Permission" dialogue box

21- Select "portatile_Asus\Marco" from the "Group or user names" list, and click to place a check in the "Local Activation"/"Allow" box

22- Click the "OK" button

23- Back in the "Security" tab, click the "Apply" button, then keep clicking "OK" until all windows are closed

24- Open Regedit with Administrative rights

25- Reassign ownership back to default "TrustedInstaller" for the two modified CLSID and APPID values

26- In order to do so, type "NT SERVICE\TrustedInstaller" (without quotes) in the dialogue box mentioned at #6, and click the "OK" button

27- Close all windows and exit Regedit

28- Reboot



Could you please check and tell me if both procedures, as exposed above through multiple paragraphs, are correct and safe to perform? As you can see, I've tried to include my own parameters. Is everything truly and completely accurate? Thank you




			
		
	

Thank you for this AWSOME Guide ! finally I made it because I had no idea how to revert back to TrustedInstaller Permission, no one said how .
I don't have the error !

Lately I've been getting these mystery 10010 errors, typical wording, "the server {whatever} failed to respond..." only when I look in the registry or DCOM Config I can't find anything with that designation.
Anyone else getting these?

After last month's Anniversary Update, it took me quite some time to narrow down the root cause of Event 10010 on my PC:

In Performance Monitor (in Control Panel > Administrative Tools) I disabled a lot of the Startup Event Trace Sessions. The culprit is WdiContextLog --> make sure this remains enabled!

I didn't have to go through those steps in manually enabling the permissions in Component Services like I did in the past.

x7007 said:

Hey

I checked about this error which is a bit different than the one I had on my desktop computer, I have other error on my Laptop

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{3185A766-B338-11E4-A71E-12E3F512A338}
and APPID
{7006698D-2974-4091-A424-85DD0B909E23}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

I checked in microsoft site, they says we need to check all of them and not just Local Launch and Local Activation.

• Local Launch
• Remote Launch
• Local Activation
• Remote Activation

https://support.microsoft.com/en-us/kb/899965

Anyone still here can answer the question ?
Thanks