Error - Event ID: 10016; DistributedCOM

Anonymous
2013-10-20T20:30:29+00:00

I am getting this error repeatedly since I updated from Windows 8 to 8.1. It occurs once every time the PC is booted, about 2 minutes after it boots up.

Can you please help me to fix it?

Log Name:      System

Source:        Microsoft-Windows-DistributedCOM

Date:          10/20/2013 3:19:04 PM

Event ID:      10016

Task Category: None

Level:         Error

Keywords:      Classic

User:          LOCAL SERVICE

Computer:     

Description:

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID

{C2F03A33-21F5-47FA-B4BB-156362A2F239}

 and APPID

{316CDED5-E4AE-4B15-9113-7055D84DCC97}

 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

The APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} is for a COM application called "Immersive Shell". I cannot use the Component Services administrative tool to edit the security permissions because every setting is "grayed-out".

I tried running in Safe Mode and was still unable to modify any of the Immersive Shell settings.

The PC has no software installed except for the latest Intel drivers. I performed a clean installation of Windows 8, installed chipset, VGA, Intel Rapid Storage Tech, LAN, and Intel Management Engine drivers. Then I updated to 8.1 through the Store app. The errors began immediately after that update.

The PC has an ASUS Z87 motherboard, 16 Gb of DDR3-1866 ram, Intel i7-4770k cpu. It is not overclocked but memory is in XMP mode at frequency 1866. The system drive is an SSD.

Windows for home | Previous Windows versions | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2013-10-24T18:39:39+00:00

In system event viewer, I started getting error Event ID: 10016 after upgrading to Win8.1 on October 17, 2013.  The system event viewer on my Dell XPS One 2710 was error free prior to upgrading from Win8 to Win8.1.

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID

{316CDED5-E4AE-4B15-9113-7055D84DCC97}  to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

For me, the solution was provided by Greg310 in Dulwichdik's link as follows:

  1. Open Regedit
  2. Go to HKEY_Classes_Root\CLSID{C2F03A33-21F5-47FA-B4BB-156362A2F239}
  3. Right click on it then select permissions
  4. Click Advance and change the owner to Administrators group. Also click the box that will appear below the owner line. ("Replace owner ...")
  5. Apply full control
  6. Go to HKEY_LocalMachine\Software\Classes\AppID{316CDED5-E4AE-4B15-9113-7055D84DCC97}
  7. Right click on it then select permission
  8. Click Advance and change the owner to Administrators group
  9. Click the box that will appear below the owner line
  10. Click Apply and grant full control to the Administrators group
  11. Go to Administrative tools
  12. Open component services
  13. Click Computer, click my computer, then click DCOM
  14. Look for the corresponding service that appears on the error viewer [Immersive Shell]
  15. Right click on it then click properties
  16. Click security tab then click Add User. Add Local Service then apply
  17. Tick the Activate local box

Thank you Daniel MoisesMagulado and Greg310 for addressing the problem and providing the solution!

Was this answer helpful?

800+ people found this answer helpful.
0 comments

99 additional answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2016-02-21T23:38:56+00:00

    So I am having this issue, except the corresponding service is the Runtime broker. I followed the steps shown here, but the error is still occurring. My understanding is that the Runtime broker is related to the Microsoft Store in Windows 8, 8.1 and 10. I am using 10. For what it's worth, I am having no visible problems with using the Store. I have downloaded and played apps without a problem. Could this be a false positive situation?

    Was this answer helpful?

    0 comments
  2. Anonymous
    2016-04-03T04:24:18+00:00

    I disabled DCOM several more than a month ago and still get the errors

    I got 184 of them in the last five hours.

    They are all:

    The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID

    {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

    and APPID

    {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

    to the user DESKTOP-BUD35RH\Usher SID (S-1-5-21-3081079085-2136296168-1791432505-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2016-04-03T10:21:54+00:00

    Habe DCOM nicht deaktiviert.

    Ich habe die Lösung wie von MacInOhio beschrieben übernommen und es funktioniert mit WIN10 64Bit.

    ..keine DCOM-Fehlermeldungen mehr!

    Nach einem Windows10 Update, sollte diese Änderungen überprüft und vielleicht wiederholt werden.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2016-04-03T15:34:53+00:00

    Go to your registry editor and enter those CLSID & APPID then change the permissions by right clicking on them. I googled around and found a guide on how to go about it and what to look for.

    I stopped getting those DCOM errors by doing that and also the Nov W10 build update seemed to reconcile a lot of errors I was getting; currently upon reboot I only get 7 warnings....and no more red error messages. It took a lot of investigative work to eliminate most of those errors. I also used a little program from SevenForums called Win 7 Viewer that erases all system errors and it helped me track em down one at a time after reboots; plus it keeps Event Viewer clean and relative instead of having loads of errors gumming up the process.

    Was this answer helpful?

    0 comments