Event ID 10016 -- DCOM permissions error

Not without the actual 10016 error text - the CLSID in it will track back to an AppID, which will denote which COM object is failing. Given there can be hundreds of COM objects on a machine, and a COM object alone can have multiple AppIDs, it's kinda important to get the actual error message text .

This thread became quite lengthy and information on how to solve distributed... I tried to make a cookbook solution for my (as it seems not so rare) entry in the Eventviewer:

Code:

Log Name:      System
Source:        Microsoft-Windows-DistributedCOM
Date:          11.05.2012 08:14:18
Event ID:      10016
Task Category: None
Level:         Error
Keywords:      Classic
User:          SYSTEM
Computer:      X120
Description:
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 and APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

---
The solution of this problem is described by Event 10016 may be logged in the System log on a computer that is running Windows XP Professional x64 Edition. However this solution can not be applied as even the 'Administrator' does not have rights to change the Launch rights!

I searched the registry to find:
- CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
and
- APPID {344ED43D-D086-4961-86A6-1106F4ACAD9B}
both resolve to 'IPBusEnum'!

To be able to apply the MS-Patch you need to:
1) Take Ownership (right click on key) off the following objects (make sure to check 'Replace owner on subcontainers and ojects' as well) :
- HKLM\Software\Classes\AppID\{344ED43D-D086-4961-86A6-1106F4ACAD9B}
and
- HKLM\Software\Classes\CLSID\{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}

2) Set Permissions (right click on key). Grant 'SYSTEM' and 'Administratos' 'Full Control' for:
- HKLM\Software\Classes\AppID\{344ED43D-D086-4961-86A6-1106F4ACAD9B}
and
- HKLM\Software\Classes\CLSID\{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}

Note:
I did the above for
- HKEY_CLASSES_ROOT\CLSID\{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
as well. But I do think there was no need for this....

Now go back to Event 10016 may be logged in the System log on a computer that is running Windows XP Professional x64 Edition and grant SYSTEM and LOCAL SERVICE all Permissions!

In case KB899965 vanishes:
- Run 'dcomcnfg'
- In Component Services, double-click Component Services, double-click Computers, double-click My Computer, and then click DCOM Config.
- Locate 'IPBusEnum' in the right pane and use 'Properties' --> 'Security' --> Launch and Activation Permissions area, click Customize, and then click Edit.
- If not exisiting add SYSTEM and LOCAL SERVICE
- check under 'Permissions for ... ' all 'Allow' boxes!
- go back to 'Security'. Click 'Apply'

Hey Paul - welcome to SF. You might want to put this into it's own thread though, as it has nothing to do with this one and is really hard to find. You'll probably get more help if you create a new thread for this.

I always disable DCom, never need it since Win98 days.

Mircow said:

PB Solved by me under Windows Seven 32 bits.
Exactly the same PB.

The last thing I did is:
net localgroup Administrators "NT Authority\LocalService" /add

And now , the PB has gone.
Youpiiiiii, thanks guys.

Can you give me the steps to do this?