DistributedCom (DCOM) error event ID 10016

Several of the Windows 2016 servers I look after have been showing a DCOM error which appears as event ID 10016.

The error reads “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {3480A401-BDE9-4407-8C02-798A866AC051} and APPID {30AD8C8E-AE85-42FA-B9E8-7E99E3DFBFC5} to the user xxx SID (S-1-5-21-391 5011649-XXX-2122644135-1731) from address LocalHost (Using LRPC) running in the container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”

I’m not sure why this error occurs or if it affects anything else, but I’ve not seen any side effects. It does, however, fill up the event log.

In order to fix this error, you first need to download a PowerShell script. You can find this in the Microsoft gallery here:

https://gallery.technet.microsoft.com/scriptcenter/Grant-Revoke-Get-DCOM-22da5b96

Microsoft appear to have removed the script for some reason, so here is a link to a copy I have, but I hold no responsibility for any issues with the script. If a new page opens, instead of a download, right-click on the page and select “Save Copy” and remove the .txt extension.

Save the file to a local directory e.g C:\Temp.

Run Windows PowerShell as admin.

Change directory to the local directory e.g. C:\Temp

Type:
import-module .\dcompermissions.psm1

Then run the following command for each App ID giving the error. Replace the App ID with the one in your event log:

grant-dcompermission -applicationid "{30AD8C8E-AE85-42FA-B9E8-7E99E3DFBFC5}" -account "system" -type launch -permissions locallaunch, localactivation -overrideconfigurationpermissions

The DCOM logon will now work for this App and stop flooding the event log.

Hope this helps, please let me know in the comments below,

Ian