Windows 7: Event ID 10016 -- DCOM permissions error

I'm having trouble trying to figure out how to correct a persistent Event ID 10016 error that keeps showing up in Event Viewer.

I've actually found a couple of guides on how to fix this...change the launch permissions for the app that's causing the problem (IPbusEnum) but when I try to change the launch permissions using dcomcnfg none of the options on the properties/securities tab are available (grayed out).

My user has administrator permissions, I've tried launching dcomcnfg.exe by right click/click on "run as administrator" but no go.

Here's the text of the error message:



The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
and APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.



The CLSID and APPID resolve to a service run under svchost (IPBusEnum). Would appreciate any pointers/hints on how to resolve this error.

DCOM objects are also available directly in registry in HKLM\Software\Classes\AppID.Find subkeys which error message say and give System account and Administrators group full control to these

Thanks for the response.

Regedit gives me an "access denied" message. Tried again starting regedit.exe with "run as administratior" option with same result.

I can change permissions for some items, including the APPIDs on either side of this one in regedit's list, but not this particular APPID.

Two explanations why you can't change permissions:

1.You are not the owner of this key and first you have to takeownership of key

see example:



in above example the owner of key is TrustedInstaller not you.Probably in your case the owner of this key is TrustedInstaller or System,not you or Administrators group and thus this problem.You can only change permission if you or Administrators group are owner.So you have to takeownership of this key lecture:Take Ownership of file - Vista Forums

2.Another reason wouldbe restriction relate with inheriting permissions from object's parrents.Make sure the below options are unchecked (image)

That did it. Thanks.

I found this forum because I was looking for a solution to the same exact Event Viewer error that rbmorse described in the opening post.

I followed the instructions in this thread, but I still get the same error. I'm not an expert with this stuff, but I thought the changes I made would work.

I gave ownership to the Administrators Group and that allowed me to change permissions. I made sure that System and Administrators both had Full Control for the CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} and for the APPID {344ED43D-D086-4961-86A6-1106F4ACAD9B}.

However, after I rebooted, the Event ID 10016 error persists.

I doubt it is really issue and I think the best way to ignore it

Well...Maybe there is way to solve it although I don't know it is worth to do that.

Run cmd.exe with administrative previlliges (right click on cmd.exe as admin) and type:

net localgroup Administrators "NT Authority\LocalService" /add


WARNING:

If your first language is not English you have to type "Administrators" in your own language

Hi Flavius.

I ran the cmd as you suggested and although it did "successfully add", it did not resolve the Event Viewer error.

Should I change it back to the way it was? If so, how?

Thanks for your help.

The only thing I can add is to go back to Flavius' post #4 and study it carefully. Note there are two steps...first is changing ownership then setting the correct permissions. I rebooted after those steps, although it probably wasn't necessary.

Then I still had to go back to dcomcnfg and set the proper launch permissions for the offending app...actually I think I went directly to the registry as suggested in Flavius' #2.

Anyway...fixing the ownership issue didn't fix the underlying problem, it only made it possible to fix the underlying problem.

You can try another things find these keys:

HKLM\Software\Classes\AppID\{344ED43D-D086-4961-86A6-1106F4ACAD9B}

and HKLM\Software\Classes\AppID\{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}

and add LOCAL SERVICE account to have full control for these keys

To remove Local Service from Administrators group type:

net localgroup Administrators "NT Authority\LocalService" /delete