• Welcome to Overclockers Forums! Join us to reply in threads, receive reduced ads, and to customize your site experience!

Every minute event viewer logs critical DistributedCOM error 10016

Overclockers is supported by our readers. When you click a link to make a purchase, we may earn a commission. Learn More.

RaV3N

Member
Joined
Oct 2, 2008
Location
New Jersey/NY
Every minute sometimes every second from the time the computers turns on event viewer continuously logs a critcal red error the source is DistibutedCOM and the event ID is 10016. Under general it says:

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
to the user _-PC\('_') SID (S-1-5-21-2451308208-76326773-125820168-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

XML view:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-08-13T17:20:19.000Z" />
<EventRecordID>510996</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>_-PC</Computer>
<Security UserID="S-1-5-21-2451308208-76326773-125820168-1000" />
</System>
- <EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}</Data>
<Data Name="param5">_-PC</Data>
<Data Name="param6">('_')</Data>
<Data Name="param7">S-1-5-21-2451308208-76326773-125820168-1000</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Friendly view:

- System

- Provider

[ Name] Microsoft-Windows-DistributedCOM
[ Guid] {1B562E86-B7AA-4131-BADC-B6F3A001407E}
[ EventSourceName] DCOM

- EventID 10016

[ Qualifiers] 49152

Version 0

Level 2

Task 0

Opcode 0

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2009-08-13T17:20:19.000Z

EventRecordID 510996

Correlation

- Execution

[ ProcessID] 0
[ ThreadID] 0

Channel System

Computer _-PC

- Security

[ UserID] S-1-5-21-2451308208-76326773-125820168-1000


- EventData

param1 machine-default
param2 Local
param3 Activation
param4 {BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
param5 _-PC
param6 ('_')
param7 S-1-5-21-2451308208-76326773-125820168-1000
param8 LocalHost (Using LRPC)
 
RaV3N said:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}

to the user _-PC\('_') SID (S-1-5-21-2451308208-76326773-125820168-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

You can search HKCR for the CLSID to determine the application name/type.

The "SID ..-1000" is reserved for the local administrator account. Sounds like a permission issue from an application, not surprising. :D

"compexp.msc" will launch component services if you would like to fiddle with perms.
 
I also forgot to mention this is a windows vista x64 computer. If its an application how can I figure out which one it is?
 
I also forgot to mention this is a windows vista x64 computer. If its an application how can I figure out which one it is?
Irregardless of whether the OS is XP or Vista, the instructions for locating the application (under the HKCR key in the registry) are given in the MSKB article I linked you to. Like chawks2 mentioned, the CLSID string is listed in the error log... {BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}, along w/ the Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" info.

In Vista under Component Services--> DCOM Config., elect to show Details view instead of Large Icons, as it will show the App ID for each application in the Details pane.
 
Back