Notices

Overclockers Forums > Software > Microsoft Operating Systems
Microsoft Operating Systems Microsoft Operating Systems and Applications
Forum Jump

Every minute event viewer logs critical DistributedCOM error 10016

Post Reply New Thread Subscribe Search this Thread
 
 
Thread Tools
Old 08-29-09, 10:09 PM Thread Starter   #1
RaV3N
Member

 
RaV3N's Avatar 

Join Date: Oct 2008
Location: New Jersey/NY

 
Every minute event viewer logs critical DistributedCOM error 10016


Every minute sometimes every second from the time the computers turns on event viewer continuously logs a critcal red error the source is DistibutedCOM and the event ID is 10016. Under general it says:

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
to the user _-PC\('_') SID (S-1-5-21-2451308208-76326773-125820168-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

XML view:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-08-13T17:20:19.000Z" />
<EventRecordID>510996</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>_-PC</Computer>
<Security UserID="S-1-5-21-2451308208-76326773-125820168-1000" />
</System>
- <EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}</Data>
<Data Name="param5">_-PC</Data>
<Data Name="param6">('_')</Data>
<Data Name="param7">S-1-5-21-2451308208-76326773-125820168-1000</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Friendly view:

- System

- Provider

[ Name] Microsoft-Windows-DistributedCOM
[ Guid] {1B562E86-B7AA-4131-BADC-B6F3A001407E}
[ EventSourceName] DCOM

- EventID 10016

[ Qualifiers] 49152

Version 0

Level 2

Task 0

Opcode 0

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2009-08-13T17:20:19.000Z

EventRecordID 510996

Correlation

- Execution

[ ProcessID] 0
[ ThreadID] 0

Channel System

Computer _-PC

- Security

[ UserID] S-1-5-21-2451308208-76326773-125820168-1000


- EventData

param1 machine-default
param2 Local
param3 Activation
param4 {BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
param5 _-PC
param6 ('_')
param7 S-1-5-21-2451308208-76326773-125820168-1000
param8 LocalHost (Using LRPC)

__________________

Asus P5N72-T 780i
850 watt Coolmaster PSU
XFX GTX280 1GB 670MHz
Q9550 C1 @ 3.82 Ghz 1.31V LLC Liquid Cooled
3Tb 7200rpm w/ Dual Boot Windows 7 & Fedora
Mushkin XP 4GB ASCENT (2 x 2GB) DDR2 1066Mhz 5-5-5-15 2.1V
RaV3N is offline   QUOTE Thanks
Old 08-29-09, 10:35 PM   #2
redduc900
Super Moderator
First Responders

 
redduc900's Avatar 

Join Date: Dec 2000
Location: WCG@home in Portland

10 Year Badge
 
Event 10016 may be logged in the System log on a computer that is running Windows XP Professional x64 Edition
http://support.microsoft.com/kb/899965

Event ID 10016 Source DCOM
http://www.eventid.net/display.asp?e...e=DCOM&phase=1

redduc900 is offline   QUOTE Thanks
Old 08-29-09, 10:44 PM   #3
chawks2
Premium Member #1

 
chawks2's Avatar 

Join Date: Jun 2004
Location: OG, CT

 
Quote:
Originally Posted by RaV3N
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}

to the user _-PC\('_') SID (S-1-5-21-2451308208-76326773-125820168-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
You can search HKCR for the CLSID to determine the application name/type.

The "SID ..-1000" is reserved for the local administrator account. Sounds like a permission issue from an application, not surprising.

"compexp.msc" will launch component services if you would like to fiddle with perms.

__________________
"The only solid piece of scientific truth about which I feel totally confident is that we are profoundly ignorant about nature...It is this sudden confrontation with the depth and scope of ignorance that represents the most significant contribution of 20th century science to the human intellect."
-Lewis Thomas, The Medusa and the Snail

"The best definition we have found for civilization is that civilized man does what is best for all, the savage does what is best for himself."
-Edwin Hubble

H.E.A.T
MarioKart FID-0774-5798-8330
chawks2 is offline   QUOTE Thanks
Old 09-03-09, 07:06 PM Thread Starter   #4
RaV3N
Member

 
RaV3N's Avatar 

Join Date: Oct 2008
Location: New Jersey/NY

 
I also forgot to mention this is a windows vista x64 computer. If its an application how can I figure out which one it is?

__________________

Asus P5N72-T 780i
850 watt Coolmaster PSU
XFX GTX280 1GB 670MHz
Q9550 C1 @ 3.82 Ghz 1.31V LLC Liquid Cooled
3Tb 7200rpm w/ Dual Boot Windows 7 & Fedora
Mushkin XP 4GB ASCENT (2 x 2GB) DDR2 1066Mhz 5-5-5-15 2.1V
RaV3N is offline   QUOTE Thanks
Old 09-07-09, 09:54 AM Thread Starter   #5
RaV3N
Member

 
RaV3N's Avatar 

Join Date: Oct 2008
Location: New Jersey/NY

 
Quote:
Originally Posted by chawks2 View Post
You can search HKCR for the CLSID to determine the application name/type.
Where do I search HKCR?

__________________

Asus P5N72-T 780i
850 watt Coolmaster PSU
XFX GTX280 1GB 670MHz
Q9550 C1 @ 3.82 Ghz 1.31V LLC Liquid Cooled
3Tb 7200rpm w/ Dual Boot Windows 7 & Fedora
Mushkin XP 4GB ASCENT (2 x 2GB) DDR2 1066Mhz 5-5-5-15 2.1V
RaV3N is offline   QUOTE Thanks
Old 09-07-09, 11:54 AM   #6
redduc900
Super Moderator
First Responders

 
redduc900's Avatar 

Join Date: Dec 2000
Location: WCG@home in Portland

10 Year Badge
 
Quote:
Originally Posted by RaV3N View Post
I also forgot to mention this is a windows vista x64 computer. If its an application how can I figure out which one it is?
Irregardless of whether the OS is XP or Vista, the instructions for locating the application (under the HKCR key in the registry) are given in the MSKB article I linked you to. Like chawks2 mentioned, the CLSID string is listed in the error log... {BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}, along w/ the Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" info.

In Vista under Component Services--> DCOM Config., elect to show Details view instead of Large Icons, as it will show the App ID for each application in the Details pane.

redduc900 is offline   QUOTE Thanks

Post Reply New Thread Subscribe


Overclockers Forums > Software > Microsoft Operating Systems
Microsoft Operating Systems Microsoft Operating Systems and Applications
Forum Jump

Thread Tools Search this Thread
Search this Thread:

Advanced Search


Mobile Skin
All times are GMT -5. The time now is 08:08 AM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.
You can add these icons by updating your profile information to include your Heatware ID, Benching Profile ID or your Folding/SETI profile ID. Edit your profile!
X

Welcome to Overclockers.com

Create your username to jump into the discussion!

New members like you have made this the best community on the Internet since 1998!


(4 digit year)

Why Join Us?

  • Share experience
  • Max out your hardware
  • Best forum members anywhere
  • Customized forum experience

Already a member?