Error - Event ID: 10016; DistributedCOM

Anonymous
2013-10-20T20:30:29+00:00

I am getting this error repeatedly since I updated from Windows 8 to 8.1. It occurs once every time the PC is booted, about 2 minutes after it boots up.

Can you please help me to fix it?

Log Name:      System

Source:        Microsoft-Windows-DistributedCOM

Date:          10/20/2013 3:19:04 PM

Event ID:      10016

Task Category: None

Level:         Error

Keywords:      Classic

User:          LOCAL SERVICE

Computer:     

Description:

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID

{C2F03A33-21F5-47FA-B4BB-156362A2F239}

 and APPID

{316CDED5-E4AE-4B15-9113-7055D84DCC97}

 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

The APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} is for a COM application called "Immersive Shell". I cannot use the Component Services administrative tool to edit the security permissions because every setting is "grayed-out".

I tried running in Safe Mode and was still unable to modify any of the Immersive Shell settings.

The PC has no software installed except for the latest Intel drivers. I performed a clean installation of Windows 8, installed chipset, VGA, Intel Rapid Storage Tech, LAN, and Intel Management Engine drivers. Then I updated to 8.1 through the Store app. The errors began immediately after that update.

The PC has an ASUS Z87 motherboard, 16 Gb of DDR3-1866 ram, Intel i7-4770k cpu. It is not overclocked but memory is in XMP mode at frequency 1866. The system drive is an SSD.

Windows for home | Previous Windows versions | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2013-10-24T18:39:39+00:00

In system event viewer, I started getting error Event ID: 10016 after upgrading to Win8.1 on October 17, 2013.  The system event viewer on my Dell XPS One 2710 was error free prior to upgrading from Win8 to Win8.1.

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID

{316CDED5-E4AE-4B15-9113-7055D84DCC97}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

For me, the solution was provided by Greg310 in Dulwichdik's link as follows:

  1. Open Regedit
  2. Go to HKEY_Classes_Root\CLSID{C2F03A33-21F5-47FA-B4BB-156362A2F239}
  3. Right click on it then select permissions
  4. Click Advance and change the owner to Administrators group. Also click the box that will appear below the owner line. ("Replace owner ...")
  5. Apply full control
  6. Go to HKEY_LocalMachine\Software\Classes\AppID{316CDED5-E4AE-4B15-9113-7055D84DCC97}
  7. Right click on it then select permission
  8. Click Advance and change the owner to Administrators group
  9. Click the box that will appear below the owner line
  10. Click Apply and grant full control to the Administrators group
  11. Go to Administrative tools
  12. Open component services
  13. Click Computer, click my computer, then click DCOM
  14. Look for the corresponding service that appears on the error viewer [Immersive Shell]
  15. Right click on it then click properties
  16. Click security tab then click Add User. Add Local Service then apply
  17. Tick the Activate local box

Thank you Daniel MoisesMagulado and Greg310 for addressing the problem and providing the solution!

Was this answer helpful?

800+ people found this answer helpful.
0 comments

99 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2015-07-26T23:29:22+00:00

    I don't find admin group, after advanced. Totally with you up until this point.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments
  2. Anonymous
    2016-11-03T20:41:16+00:00

    what, nearly 3yrs and im getting the same problem. ?

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  3. Anonymous
    2016-10-12T02:47:41+00:00

    CLSID and APPID hives are protected by "Trusted Installer" in Windows10 build 10586 and you will not be able to get full permission (even as Administrator=Owner) to edit any of these keys with Regedit without the Takeown command first of the file but I don't know what file that would be......

    Frank in Abra : thank you very much for your help.

    But....

    Dam , with tose Distributed COM error (10016) I'm crashing every day , I'm bored.

    Do I have to pray to get a fix ? seriously ? Microsoft ?

    Hi Shining,

    It took me a while but I got rid of the 10016 DCOM errors in the Anniversary version and somehow also the warnings (see below):

    There are at least 4 items with different settings involved and any combination may cause an error:

    Read the error messages in Event Viewer carefully, they all look alike but subtle differences are important. The user can be "System" (named NT AUTHORITY\SYSTEM), a long CLSID code alias "All Aplication Packages"

    or your logon name that you add in the CLSID-APPID permissions list and check if the name is correct or if it is already there give full access. The second item is the CLSID or APPID component, code or name you will have  to look up the application name with regedit by using find in HKEY_CLASSES_ROOT and allow access (edit the Permissions key).

    That application will have to be edited (Security tab) in Component Services (Administrative tools, Control Panel)) listed under DCOM Config either the name will appear or at the bottom of the list the APPID code, the problem is that the Security tab (and all other tabs) will be greyed out(no access permitted) for that item so you will have to Change Owner for that CLSID and APPID first, than allow full access to System and/or your logon name(regedit), then open Component Services again to see if the tabs for that item are no longer greyed out. How to do all that is described in this thread and many others. (Change owner to Administrators then allow full access, either change back the owner to NT service\TrustedInstaller (named Trusted Installer) or leave Owner as Administrators (some say to change it back after editing).

    The third and fourth items concern the Security tab in Component Services, Dcom Config

    Click on Security, Custom and Edit and allow full access + Local Launch and Activation and in Access.

    It is a lot of work and I am not sure the errors won't come back.

    Frank

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  4. Anonymous
    2013-10-23T22:59:32+00:00

    I ended up secure erasing my SSD and doing a clean installation of 8>8.1. The first time I opened the Bing Weather app, it spat out this error 186 times!

    I uninstalled the weather app, but the error is still occurring on reboots.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments