Error - Event ID: 10016; DistributedCOM

In system event viewer, I started getting error Event ID: 10016 after upgrading to Win8.1 on October 17, 2013.  The system event viewer on my Dell XPS One 2710 was error free prior to upgrading from Win8 to Win8.1.

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID

{316CDED5-E4AE-4B15-9113-7055D84DCC97}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

For me, the solution was provided by Greg310 in Dulwichdik's link as follows:

1. Open Regedit
2. Go to HKEY_Classes_Root\CLSID{C2F03A33-21F5-47FA-B4BB-156362A2F239}
3. Right click on it then select permissions
4. Click Advance and change the owner to Administrators group. Also click the box that will appear below the owner line. ("Replace owner ...")
5. Apply full control
6. Go to HKEY_LocalMachine\Software\Classes\AppID{316CDED5-E4AE-4B15-9113-7055D84DCC97}
7. Right click on it then select permission
8. Click Advance and change the owner to Administrators group
9. Click the box that will appear below the owner line
10. Click Apply and grant full control to the Administrators group
11. Go to Administrative tools
12. Open component services
13. Click Computer, click my computer, then click DCOM
14. Look for the corresponding service that appears on the error viewer [Immersive Shell]
15. Right click on it then click properties
16. Click security tab then click Add User. Add Local Service then apply
17. Tick the Activate local box

Thank you Daniel MoisesMagulado and Greg310 for addressing the problem and providing the solution!

Again, this will not always work if you do not use the True Admin account.   That is why people get "Access Denied."

Furthermore, the fix quoted here is for a specific DCOM error, and will not work on all DCOM errors.  For the other DCOM errors you want to use the CLSID and APPID guides.

When you say your PC shuts down it leads me to believe that it may be related to your Power Settings. Some come 'out of the box' or 'stock' to shut down after so many minutes. It could be sleep settings or hard drive settings to name a few. Those two need to be set to NEVER. Double check your Power Settings and make sure that they aren't set to shut down things. You'll have to go through each an every one setting them to the way you want when finished create your own personal power settings while there so if need be you can just click on that to reset them back to the way you want.

As far as DCOM errors go you'll have to find which GUID is being generated in the Event Viewer showing those errors. Then you'll have to go into the registry file an 'take ownership' which means you'll change the Permissions to Administrators to allow you to change those settings. Some times they are default set to Trusted Installer, by changing those you'll be able then to go to the Group Policy Editor and add SYSTEM to that group (along with Administrators) that will stop those DCOM errors in W10. It usually is a RunTimeBroker setting that needs to be 'tweaked' Here is a link I used to fix those DCOM errors. I also had one other GUID showing so I copied that from Event Viewer and searched regedit changed those permissions to Administrator along with the greyed-out RunTime in GPO (Group Policy Editor) 

note these tips where taken from a blog site found on Google

Regedit Take Ownership

You will need to take ownership then set rights against two different keys.  The keys are:

HKEY_CLASSES_ROOT\AppID{9CA88EE3-ACB7-47c8-AFC4-AB702511C276}

HKEY_CLASSES_ROOT\CLSID{D63B10C5-BB46-4990-A94F-E40B9D520160}

Open Regedit with Administrators privileges and navigate to the keys above (remember you have to do this twice)

WinKey + X >> Command Prompt (Admin) >> Type in Regedit

Right click the key >> permissions

Click advanced

At the top change the Owner to COMPUTERNAME\Administrators

Please note if you are domain joined you’ll have to change where you are searching from to your local computer

Look in the Permission Entries field

If the local system administrators group is listed ensure it has full control

if the administrators group is not listed add it and give it full control.  (note you can only do this if you are a member of the administrators group and it is now the owner)

Click okay a lot >> Ensure you apply permissions to all child objects

Change DCOM Permissions

Need to ensure DCOM permissions are setup

Open DCOMCNFG as an Administrator

WinKey + X >> Command Prompt (Admin) >> Type in DCOMCNFG

Navigate to Component Services >> Computers >> My Computer >> DCOM Config

Find the RunTimeBroker  >> Right Click >> Properties >> Security Tab

Launch and Activation Permissions >> Edit >> Add System and give it full control

I also added the Administrators group just for testing

While changing permissions I was prompted several times to remove bad account references.  I did this as the computer knows which accounts have been removed.

Summary

At this point you should have sorted the DCOM errors.  Give your computer a reboot.

It can be a bit daunting at first I know it took me several tries til I felt comfortable with it. The main thing is getting the DCOM error App ID & GUID from the Event Viewer errors and finding them in the Registry.

This will not always work if you don't do this from the True Admin account.   That's why people get "Access Denied." 

the fix quoted here is for a specific DCOM error, and will not work on all DCOM errors.  For the other DCOM errors you want to use the CLSID and APPID guides.

when you get the error in Event Viewer it'll show which CLSID an APP ID are listed in most cases it is a string listed in the viewer itself. You may have to expand the viewer to show these alpha-numeric strings.

Go to EV then go to Custom Views then Administrator Events in that about mid way down you'll see two tabs on the left side General & Details open Details then you'll see Friendly View & XML View either one will show the CLSID & App ID that are in question usually they are these two:

HKEY_CLASSES_ROOT\AppID{9CA88EE3-ACB7-47c8-AFC4-AB702511C276}

HKEY_CLASSES_ROOT\CLSID{D63B10C5-BB46-4990-A94F-E40B9D520160}

but not always sometimes (like in my case) there was another one that generated so I had to 'take ownership' of that one too. What you're looking for is the alpha-numeric string that are within the 'brackets' or parentheses that is the string you want to copy>paste in the regedit