Asked by:
Event Viewer Error 10010, Event Viewer Warning 1014

-
Issue #1. Every time I boot up the computer, the following error is generated in Event Viewer:
Source: DistributedCom, Event ID: 10010
The server {F9717507-6651-4EDB-BFF7-AE615179BCCF} did not register with DCOM within the required timeout.
This key pertains to appID WinInetBrokerServer (CLSID WinInetBroker). I tried adding permissions to the key(s) but that didn't solve the problem. In the permissions for the key, the first user name listed is named Account Unknown (S-1-15-2-1). I think maybe that may have something to do with it. I deleted the 6 registry keys associated with this key and everything worked but I was locked out of Windows XP Mode (Windows Virtual PC). I was wondering if anyone had any suggestions to fix this error?
Issue #2. ALSO, exactly once a day I receive the following warning in Event Viewer:
Source: DNS Client Events, Event ID: 1014
Name resolution for the name imrk.net timed out after none of the configured DNS servers responded.
It would seem that there is an application on my computer that is trying to connect to this site for whatever reason. I have read about ties between this domain and hacking. Someone suggested to enable boot logging in Process Monitor to try to pinpoint the app but there's so much going on in Process Monitor I'm not really sure where to look. All of the apps that run on a daily basis (including the ones that are set to run at startup) seem relatively safe to me. I've run the gamut of anti-virus and scans and my computer is clean. I was wondering if anyone had any suggestion to fix this error?
Thank you in advance
- Edited by Handsome Prints Friday, May 5, 2017 6:31 PM Formatting
Question
All replies
-
Hi Handsome Prints,
According to your description, if it doesn’t work after you change the permission and use Registry Editor incorrectly, I suggest that we’d better run system in Safe Mode and start system restore to any point in the history to repair. Or it may require you to reinstall your system.
For event 1014, we could try to perform a Clean Boot to avoid the effects of third party software to check. Then we could use the command “ipconfig /flushdns” to clear DNS cache.
Also please check the link below about Event ID 1014: Microsoft Windows DNS Client.
Hope it will be helpful to you
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. -
Thank you. I have been receiving this error for over a year now, so it's not possible to go back to a previous restore point.
I went through all the programs in the Services and Startup tabs of msconfig and removed two or three items that weren't being used anymore and the 1014 Warning has since disappeared thankfully.
The 10010 DCOM error still persists though. That's a pretty stubborn one, over 500+ people cite that error (usually in conjunction with several others):
but I have not seen a solution posted for it, possibly because more nefarious things are going wrong and the focus is on those other more serious items.
I'm sure there's a good reason for it, but it seems a bit overly complicated having so many different owners for files (System, Trusted Installer, Network, Creator Owner, etc.) in addition to Administrator and User. You'd think three would suffice (e.g. System, Administrator, User).
- Edited by Handsome Prints Saturday, May 13, 2017 9:09 PM
-
Hi Handsome Prints,
Thank you for your clarification. Your idea is right. Then Event ID: 10010 is related to the permission and overly complicated having so many different owners for files. Always we open Component Services and verify that the required security properties are set below.
https://technet.microsoft.com/en-us/library/dd337766%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396
If it doesn’t work, based on the error code, we could try to use the two suggestions in the below to solve this issue.
If we are locked out of Windows XP Mode, we need open XP Mode Settings and remove the password to check. Please check the steps in the link below provided by Bhavin Trikamji.
Hope it will be helpful to you
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. -
Thank you Carl. The Access Permissions and Launch and Activation Permissions for my computer are identical to the settings on my wife's computer (both Limits and Defaults) with the exception of the Network Service entry that I added under the Launch and Activation Permissions (as per the link you referenced) which did not resolve the error. However, the permissions for the WinInetBrokerServer App ID and the WinInetBroker CLSID are VERY different compared to those on my wife's computer:
-------------------------------------------------------------------------------------
WININETBROKERSERVER APP ID PERMISSIONS (ON MY COMPUTER)
Restricted: Read
System: Read, Full Control
Ken (me): Read, Full Control
Administrators: Read, Full Control
WININETBROKER CLSID PERMISSIONS (ON MY COMPUTER)
Account Unknown(S-1-15-2-1): Special Permissions
System: Special Permissions
Administrators: Special Permissions
Users: Special Permissions
TrustedInstaller: Read, Full Control
-------------------------------------------------------------------------------------
WININETBROKERSERVER APP ID PERMISSIONS (ON MY WIFE'S COMPUTER)
S-1-15-3-1024...: Read
Restricted: Read
System: Read
Users: Read
Administrators: Read
TrustedInstaller: Read, Full Control
WININETBROKER CLSID PERMISSIONS (ON MY WIFE'S COMPUTER)
S-1-15-3-1024...: Read
System: Read
Administrators: Read
Users: Read
TrustedInstaller: Read, Full Control
-------------------------------------------------------------------------------------
Major differences (when compared to my wife's settings):
1) Looks like I have changed the owner of the App ID key from TrustedInstaller to Administrators (in an attempt to make modifications to the permissions).
2) On the App ID key, instead of an entry for Users, I have an entry for a specific user (Ken).
3) On the App ID key, I am missing the Trusted Installer user.
4) On the CLSID key, the Account Unknown, System, Administrators, and Users users have Special Permissions only instead of Read permissions.
Also, another issue is:
5) On the App ID key, I am missing the Account Unknown user (I believe I deleted references to Account Unknown users because I thought they shouldn't be listed but perhaps that account corresponds to a Windows XP Mode user).
Where it gets tricky is that I cannot modify these permissions without changing the owner of the keys from TrustedInstaller to Administrators (for example) and if I do that, I am not able to change it back to TrustedInstaller (it doesn't "recognize" this object when I verify via Check Names). Also, I am not able to add the Account Unknown(S-1-15-2-1) or Trusted Installer users to the list of users for the App ID key for the same reason. Well, I can, but if I click on Check Names to "verify" the user/object, it shows the message:
An object named "TrustedInstaller" cannot be found. Check the selected object types and location for accuracy and ensure that you typed the object name correctly, or remove this object from the selection.
An object named "Account Unknown(S-1-15-2-1)" cannot be found. Check the selected object types and location for accuracy and ensure that you typed the object name correctly, or remove this object from the selection.
Lastly, if I do decide to go ahead and change the permissions on the App ID and CLSID, I am unsure whether I should replace the owner on subcontainers and objects (by checking the corresponding checkbox).
So as you suggested, it looks like the error has to do with messed up permissions. With all the information given above, do you have any recommendations?
PS: I am not locked out of XP Mode (I did a system restore to regain access after deleting the App ID for WinInetBrokerServer and CLS ID key for WinInetBroker).
- Edited by Handsome Prints Tuesday, May 16, 2017 5:16 PM
-
Hi Handsome Prints,
Thank you for your clarification.
I think that the APP ID and CLSID different from you wife' system could be the issue. And now it displays account Unknown can't be found. Always it could be related to the Registry. If we couldn't set the permission, I suggest that you could try to use In-place upgrade to repair.
Hope it will be helpful to you
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.