Fix the NT AUTHORITY\SYSTEM permissions for the COM Server

iMatthew Tanner 0 Reputation points
2023-05-02T06:19:16.5266667+00:00

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID.

I see this with initially every Windows Server 2016 install. Which leads users to the following.

"We recently upgraded to Windows 10 and since then we have had random PC's Freezing for up to and hour. Today was a particular bad day and I have had around 20 machines freeze for an hour or more.

From event viewer they all have one thing in common and is DistributedCom Event ID 10016. Please see further down for more info.

I have read the blogs and found a fix however my question is this, I cannot go round to 20 machines editing registry settings and making changes, also when one change is made I restart the machine and another Dcom error is there in, so I have to do this a number of times on one PC.

Surely this cannot be right, is there something I am missing when installing new machines?

Can I do this through Group Policy?

Why is this happening on certain machines?

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Any help in this matter and I will be grateful."

And rightfully answered that Micrsoft confirms to just ignore it.

But it plainly states:

"This security permission can be modified using the Component Services administrative tool."

Where the user can "grant Local Activation permission"

Why would this not be the correct answer?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,170 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 43,951 Reputation points
    2023-05-02T15:24:00.6633333+00:00

    Hi,

    I'd be happy to help you out with your question. Sorry for the inconvenience caused.

    This error message can sometimes be ignored, it is true that modifying the security permissions for the affected COM server can potentially resolve the issue and prevent further problems. However, it is important to be cautious when making changes to your system's security settings, as this can introduce new problems or even compromise your system's security.

    If you are not familiar with the Component Services tool or the specifics of the permissions that need to be modified, I would recommend that you work with an experienced system administrator or consult with your organization's IT department to determine the best course of action. They can help you assess the situation and make any necessary changes to the system's security settings.

    In summary, while modifying the security permissions for the affected COM server may be a valid solution in some cases, it is not always the best or safest option.

    For more Information, please refer to following resource :-

    DCOM event ID 10016 is logged in Windows - https://learn.microsoft.com/troubleshoot/windows-client/application-management/event-10016-logged-when-accessing-dcom

    If you have any other questions or need assistance with anything, please don't hesitate to let me know. I'm here to help.

    If the reply was helpful, please don’t forget to upvote or accept as answer, thank you.

    0 comments