none
Can't fix Event 10016, DistributedCOM RRS feed

  • Question

  • Hi.

    This is the message I'm getting:

    The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
    {C2F03A33-21F5-47FA-B4BB-156362A2F239}
     and APPID 
    {316CDED5-E4AE-4B15-9113-7055D84DCC97}
     to the user GIL-PC\Gil SID (S-1-5-21-4212775015-541755525-2815841924-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.

    How can I fix this?

    In addition I got this:

    Event 513, CAPI2

    Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
    
    Details:
    AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
    
    System Error:
    Access is denied.
    .

    • Edited by Gil-Levy Wednesday, April 27, 2016 12:30 PM add info
    Wednesday, April 27, 2016 12:26 PM

All replies

  • Hi Gil,

    For 10016 issue, we usually use the following method to deal with.

    1.Click Start, click Run, type regedit in the Open box, and then click OK.

    2.Locate and then click the following registry subkey:

    HKEY_CLASSES_ROOT\CLSID\CLSID value

    Note In this subkey, "CLSID value" is a placeholder for the CLSID information that appears in the message.

    3.In the right pane, double-click AppID.

    The Edit String dialog box appears. Leave this dialog box open and continue to the next step.

    4.Click Start, click Run, type dcomcnfg in the Open box, and then click OK.

    If a Windows Security Alert message prompts you to keep blocking the Microsoft Management Console program, click to unblock the program.

    5.In Component Services, double-click Component Services, double-click Computers, double-click My Computer, and then click DCOM Config.

    6.In the details pane, locate the program by using the friendly name.

    If the AppGUID identifier is listed instead of the friendly name, locate the program by using this identifier.

    7.Right-click the program, and then click Properties.

    8.Click the Security tab.

    9.In the Launch and Activation Permissions area, click Customize, and then click Edit.

    10.Click Add, type the user's account name, and then click OK.

    11.While the user is selected, click to select the Allow check boxes for the following items:

    Local Launch

    Remote Launch

    Local Activation

    Remote Activation

    12.Click OK two times.

    13.Quit Registry Editor.

    In your scenario, you need to scroll down and find the application ID { C2F03A33-21F5-47FA-B4BB-156362A2F239} -> Right Click -> Properties and select the Security tab. After configuration, please restart computer to test result, you could refer to this article below for more information.

    Event ID 10016 — COM Security Policy Configuration

    https://technet.microsoft.com/en-us/library/cc726313(v=ws.10).aspx

    on the other hand, for your another problem, I find out a similar case talks about it, please have a look.

    https://www.storagecraft.com/support/forum/windows-10-and-event-id-513-capi2

    Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Thursday, April 28, 2016 3:10 AM
    Moderator
  • Hi Gil,

    For 10016 issue, we usually use the following method to deal with.

    1.Click Start, click Run, type regedit in the Open box, and then click OK.

    2.Locate and then click the following registry subkey:

    HKEY_CLASSES_ROOT\CLSID\CLSID value

    Note In this subkey, "CLSID value" is a placeholder for the CLSID information that appears in the message.

    3.In the right pane, double-click AppID.

    The Edit String dialog box appears. Leave this dialog box open and continue to the next step.

    4.Click Start, click Run, type dcomcnfg in the Open box, and then click OK.

    If a Windows Security Alert message prompts you to keep blocking the Microsoft Management Console program, click to unblock the program.

    5.In Component Services, double-click Component Services, double-click Computers, double-click My Computer, and then click DCOM Config.

    6.In the details pane, locate the program by using the friendly name.

    If the AppGUID identifier is listed instead of the friendly name, locate the program by using this identifier.

    7.Right-click the program, and then click Properties.

    8.Click the Security tab.

    9.In the Launch and Activation Permissions area, click Customize, and then click Edit.

    10.Click Add, type the user's account name, and then click OK.

    11.While the user is selected, click to select the Allow check boxes for the following items:

    Local Launch

    Remote Launch

    Local Activation

    Remote Activation

    12.Click OK two times.

    13.Quit Registry Editor.

    In your scenario, you need to scroll down and find the application ID { C2F03A33-21F5-47FA-B4BB-156362A2F239} -> Right Click -> Properties and select the Security tab. After configuration, please restart computer to test result, you could refer to this article below for more information.

    Event ID 10016 — COM Security Policy Configuration

    https://technet.microsoft.com/en-us/library/cc726313(v=ws.10).aspx

    on the other hand, for your another problem, I find out a similar case talks about it, please have a look.

    https://www.storagecraft.com/support/forum/windows-10-and-event-id-513-capi2

    Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    Best regards


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Unfortunately, I cannot seem to solve error 10016.

    I've done as you mentioned but it still shows up.

    Please view screenshot and highlighted areas.

    Again, this is the error message:

    The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
    {C2F03A33-21F5-47FA-B4BB-156362A2F239}
     and APPID 
    {316CDED5-E4AE-4B15-9113-7055D84DCC97}
     to the user GIL-PC\Gil SID (S-1-5-21-4212775015-541755525-2815841924-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.


    Gil Levy

    Saturday, April 30, 2016 12:52 PM
  • anyone??

    Gil Levy

    Thursday, May 5, 2016 1:44 AM
  • We have not heard from you in a couple of days. Would you mind letting us know the update of this case.

    For Event ID 10016, what I supplied are come from the official documentation, you need to ensure the system is up to date.

    Regards


    Please mark the reply as an answer if you find it is helpful.

    If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Tuesday, June 7, 2016 8:33 AM
    Moderator
  • The issue persists. I wasn't able to fix it.


    Gil Levy

    Tuesday, June 7, 2016 11:32 PM
  • I've been struggling with this Immersive Shell/Cortana 10016 DCOM error for months, trying all different combinations of launch/activation and access permissions and I would still get (sometime hundreds of) these errors after boot up.  I finally tried something very simple that seems to work 100%, at least for me.  I just changed the setting in Immersive Shell DCOM Properties Identity Tab from "The Interactive User" to "The Launching User".  I've rebooted dozens of time and no errors.  Everything seems to work fine.  From what I've read in some TechNet info, the setting really doesn't matter unless you're on a domain, which I am not.  So, for any of you who still have this error, I'd love to know if this worked for you as well.

    Friday, July 15, 2016 7:53 PM
  • I've been struggling with this Immersive Shell/Cortana 10016 DCOM error for months, trying all different combinations of launch/activation and access permissions and I would still get (sometime hundreds of) these errors after boot up.  I finally tried something very simple that seems to work 100%, at least for me.  I just changed the setting in Immersive Shell DCOM Properties Identity Tab from "The Interactive User" to "The Launching User".  I've rebooted dozens of time and no errors.  Everything seems to work fine.  From what I've read in some TechNet info, the setting really doesn't matter unless you're on a domain, which I am not.  So, for any of you who still have this error, I'd love to know if this worked for you as well.

    Thanks!

    I'll try that, though I have given up on looking at windows event viewer... life is better this way :)


    Gil Levy

    Sunday, July 17, 2016 11:34 AM
  • After I switch to launching user I get the error 

    DCOM got error "1115" attempting to start the service TrustedInstaller with arguments "Unavailable" in order to run the server

    Saturday, September 30, 2017 8:48 AM
  • I am trying this. Can we get a bump or something on this thread? I just created an account because this is the only forum I can find on the internet where all the steps have been done to fix 10016 DCOM error but it still pops up in even viewer. 

    I will post back what happens after switching to "the launching user"

    Saturday, December 2, 2017 6:30 AM
  • To prevent the events from being logged, follow these steps to grant permission to the DCOM components that have specific CLSIDs and APPIDs.
     
    Note You can find the CLSID and APPID in the event log entry.
     
    1. Start Registry Editor (<g class="gr_ gr_46 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling" data-gr-id="46" id="46">regedit</g>).
    2. Locate the following registry subkey:

      HKEY_CLASSES_ROOT\CLSID\<Target AppID>
    3. Right-click the subkey, and then click Permissions.
    4. Click Advanced.
    5. Click Add.
    6. Click Select a principal.
    7. In the Select User or Group dialog box, enter the appropriate <g class="gr_ gr_43 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar multiReplace" data-gr-id="43" id="43">administrators</g> group in the Enter the object name to select box. For example, enter <ComputerName>\Administrators.
    8. Click OK.
    9. On the Security tab, grant Full Control, and then click OK.
    10. Exit Registry Editor.
    11. Start DCOM Config (<g class="gr_ gr_45 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling" data-gr-id="45" id="45">dcomcnfg</g>).
    12. Expand Component Services > Computers > My Computer DCOM Config.
    13. Right-click the application that corresponds to the AppID that's recorded in the event log, and then select Properties.
    14. Select the Security tab.
    15. In the Launch and Activation Permissions area, select the Customize option, and then select Edit.
    16. Under Group or user names, select Add.
    17. Enter the group or <g class="gr_ gr_41 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del" data-gr-id="41" id="41">user name</g> that's recorded in the event log.
    18. Click OK.
    Friday, December 8, 2017 6:21 AM
  • Um, you are kidding, right?  I am supposed to repeat this on 100+ workstations?
    Tuesday, March 13, 2018 2:08 PM
  • When I get to step 18 in the above procedure recommended by FahadAhmed87, I get the following error:

       Unable to save permission changes on {c2f03a33-21f5-47fa-b4bb-156362a2f239}. Access is denied. 

    This error occurs even when I launch regedit in admin mode.


    • Edited by Mike Ruf Monday, May 7, 2018 3:43 PM
    Monday, May 7, 2018 3:41 PM
  • Hi, I have been suffered from this problem for months and try your ways! Thanks!
    Sunday, June 23, 2019 4:39 AM
  •  

     Same here.  Win 10 Pro 1903 on a newish PC with 16GB RAM.

     And it repeats itself over and over in Event Viewer.

     Mine is either for

     CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239}
     and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97}

      or

      CLSID  {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
     and APPID  {15C20B67-12E7-4BB6-92BB-7AFF07997402}

      Both repeat over and over.

     


    glnzglnz
    ☺ In the office, Dell Optiplex 7040 with 8GB RAM, Win 7 Pro 64-bit and Office 2010
    ☻ At home, Dell Optiplex 7010 with 16GB RAM dual-booting Win 7 Pro 64-bit (now with Office 365 Home) and Win 10 Pro 64-bit
    ♥ Also still have Dell Optiplex 755 with 4GB RAM with Win XP Pro SP3 (which still gets updates with the POS hack) and Office 2003

    • Edited by glnzglnz Friday, August 2, 2019 11:23 AM
    Friday, August 2, 2019 11:23 AM
  • DCOM event ID 10016 is logged in Windows

    Applies to: Windows 10, version 1903Windows Server, version 1903Windows 10, version 1809

    https://support.microsoft.com/en-us/help/4022522/dcom-event-id-10016-is-logged-in-windows-10-windows-server

    MS says to ignore it.

    Chris


    Chris

    Tuesday, August 6, 2019 4:10 PM