Results 1 to 6 of 6
  1. #1
    Member RaV3N's Avatar
    Join Date
    Oct 2008
    Location
    New Jersey/NY
    Posts
    437

    Every minute event viewer logs critical DistributedCOM error 10016

    Every minute sometimes every second from the time the computers turns on event viewer continuously logs a critcal red error the source is DistibutedCOM and the event ID is 10016. Under general it says:

    The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
    to the user _-PC\('_') SID (S-1-5-21-2451308208-76326773-125820168-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

    XML view:

    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10016</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-08-13T17:20:19.000Z" />
    <EventRecordID>510996</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>_-PC</Computer>
    <Security UserID="S-1-5-21-2451308208-76326773-125820168-1000" />
    </System>
    - <EventData>
    <Data Name="param1">machine-default</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}</Data>
    <Data Name="param5">_-PC</Data>
    <Data Name="param6">('_')</Data>
    <Data Name="param7">S-1-5-21-2451308208-76326773-125820168-1000</Data>
    <Data Name="param8">LocalHost (Using LRPC)</Data>
    </EventData>
    </Event>

    Friendly view:

    - System

    - Provider

    [ Name] Microsoft-Windows-DistributedCOM
    [ Guid] {1B562E86-B7AA-4131-BADC-B6F3A001407E}
    [ EventSourceName] DCOM

    - EventID 10016

    [ Qualifiers] 49152

    Version 0

    Level 2

    Task 0

    Opcode 0

    Keywords 0x80000000000000

    - TimeCreated

    [ SystemTime] 2009-08-13T17:20:19.000Z

    EventRecordID 510996

    Correlation

    - Execution

    [ ProcessID] 0
    [ ThreadID] 0

    Channel System

    Computer _-PC

    - Security

    [ UserID] S-1-5-21-2451308208-76326773-125820168-1000


    - EventData

    param1 machine-default
    param2 Local
    param3 Activation
    param4 {BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
    param5 _-PC
    param6 ('_')
    param7 S-1-5-21-2451308208-76326773-125820168-1000
    param8 LocalHost (Using LRPC)

    Asus P5N72-T 780i
    850 watt Coolmaster PSU
    XFX GTX280 1GB 670MHz
    Q9550 C1 @ 3.82 Ghz 1.31V LLC Liquid Cooled
    3Tb 7200rpm w/ Dual Boot Windows 7 & Fedora
    Mushkin XP 4GB ASCENT (2 x 2GB) DDR2 1066Mhz 5-5-5-15 2.1V

  2. #2
    Super Moderator
    First Responders
    redduc900's Avatar
    Join Date
    Dec 2000
    Location
    Portland, OR
    Posts
    16,747
    Event 10016 may be logged in the System log on a computer that is running Windows XP Professional x64 Edition
    http://support.microsoft.com/kb/899965

    Event ID 10016 Source DCOM
    http://www.eventid.net/display.asp?e...e=DCOM&phase=1

  3. #3
    Premium Member #1
    chawks2's Avatar
    Join Date
    Jun 2004
    Location
    OG, CT
    Posts
    824
    Quote Originally Posted by RaV3N
    The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}

    to the user _-PC\('_') SID (S-1-5-21-2451308208-76326773-125820168-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
    You can search HKCR for the CLSID to determine the application name/type.

    The "SID ..-1000" is reserved for the local administrator account. Sounds like a permission issue from an application, not surprising.

    "compexp.msc" will launch component services if you would like to fiddle with perms.
    "The only solid piece of scientific truth about which I feel totally confident is that we are profoundly ignorant about nature...It is this sudden confrontation with the depth and scope of ignorance that represents the most significant contribution of 20th century science to the human intellect."
    -Lewis Thomas, The Medusa and the Snail

    "The best definition we have found for civilization is that civilized man does what is best for all, the savage does what is best for himself."
    -Edwin Hubble

    H.E.A.T
    MarioKart FID-0774-5798-8330

  4. #4
    Member RaV3N's Avatar
    Join Date
    Oct 2008
    Location
    New Jersey/NY
    Posts
    437
    I also forgot to mention this is a windows vista x64 computer. If its an application how can I figure out which one it is?

    Asus P5N72-T 780i
    850 watt Coolmaster PSU
    XFX GTX280 1GB 670MHz
    Q9550 C1 @ 3.82 Ghz 1.31V LLC Liquid Cooled
    3Tb 7200rpm w/ Dual Boot Windows 7 & Fedora
    Mushkin XP 4GB ASCENT (2 x 2GB) DDR2 1066Mhz 5-5-5-15 2.1V

  5. #5
    Member RaV3N's Avatar
    Join Date
    Oct 2008
    Location
    New Jersey/NY
    Posts
    437
    Quote Originally Posted by chawks2 View Post
    You can search HKCR for the CLSID to determine the application name/type.
    Where do I search HKCR?

    Asus P5N72-T 780i
    850 watt Coolmaster PSU
    XFX GTX280 1GB 670MHz
    Q9550 C1 @ 3.82 Ghz 1.31V LLC Liquid Cooled
    3Tb 7200rpm w/ Dual Boot Windows 7 & Fedora
    Mushkin XP 4GB ASCENT (2 x 2GB) DDR2 1066Mhz 5-5-5-15 2.1V

  6. #6
    Super Moderator
    First Responders
    redduc900's Avatar
    Join Date
    Dec 2000
    Location
    Portland, OR
    Posts
    16,747
    Quote Originally Posted by RaV3N View Post
    I also forgot to mention this is a windows vista x64 computer. If its an application how can I figure out which one it is?
    Irregardless of whether the OS is XP or Vista, the instructions for locating the application (under the HKCR key in the registry) are given in the MSKB article I linked you to. Like chawks2 mentioned, the CLSID string is listed in the error log... {BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}, along w/ the Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" info.

    In Vista under Component Services--> DCOM Config., elect to show Details view instead of Large Icons, as it will show the App ID for each application in the Details pane.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •