General IT,  IT,  Support

DistributedCom (DCOM) error event ID 10016

Several of the Windows 2016 servers I look after have been showing a DCOM error which appears as event ID 10016.

The error reads “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {3480A401-BDE9-4407-8C02-798A866AC051} and APPID {30AD8C8E-AE85-42FA-B9E8-7E99E3DFBFC5} to the user xxx SID (S-1-5-21-391 5011649-XXX-2122644135-1731) from address LocalHost (Using LRPC) running in the container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”

DCOM Event 10016 Error Image

I’m not sure why this error occurs or if it affects anything else, I’ve not seen any side effects. it does, however, fill up the event log.

In order to fix this error, you first need to download a PowerShell script. You can find this in the Microsoft gallery here:

https://gallery.technet.microsoft.com/scriptcenter/Grant-Revoke-Get-DCOM-22da5b96

Save the file to a local directory e.g C:\Temp.

Run Windows PowerShell as admin.

Change directory to the local directory e.g. C:\Temp

Type:
import-module .\dcompermissions.psm1

Import Module Screenshot

Then run the following command for each App ID giving the error. Replace the App ID with the one in your event log:

grant-dcompermission -applicationid "{30AD8C8E-AE85-42FA-B9E8-7E99E3DFBFC5}" -account "system" -type launch -permissions locallaunch, localactivation -overrideconfigurationpermissions

The DCOM logon will now work for this App and stop flooding the event log.

Hope this helps, please let me know in the comments below,

Ian

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.