SQL server getting Event ID 10016 every hour

Question

Hi guys,

We are getting below error message on our SQL server with OS WS2012 every hour.

"The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 

{FDC3723D-1588-4BA3-92D4-42C430735D7D}

 and APPID

{83B33982-693D-4824-B42E-7196AE61BB05}

 to the user NT SERVICE\SQLAgent$IBSQL2012 SID (S-1-5-80-485265429-2350460967-4062759752-2586802043-2488535659) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."

I already went through some threats and read other post on internet, but under Component Services, Security tab of the particular service related to this message (based on its APPID) I can see that SYSTEM is already added and it has Local launch and Local Activation permissions granted.

Why are we still getting this issue, is because instead of local permissions we should grant Remote ".....from address LocalHost (Using LRPC) ..."?

Any thoughts

mcg

Answer 1

open services

Find the sql agent service in question

open it's properties

go to the logon tab

copy everything in the "This Account" box.

open com+

find the com+ application (you can also just right click "My computer" here and change the default for the whole system if you're lazy)

Go to properties

Go to COM security tab

Click edit default button in the "launch and Activation" permissions area

Click Add

Click "location'

Change from your domain to your local server.

Click ok

Paste the info you copied from the service logon tab above into box.

Click "check names"

It should change it to the name you need on it's own.

click ok.

done.

Answer 2

Ask in the SQL Server forums:

http://social.msdn.microsoft.com/Forums/sqlserver/en-US/home?category=sqlserver

Answer 3

Hi Rodd,

I'm so sorry for the delay, but i was off for few days, finally I granted the needed permissions to the agent mentioned in the error message and without restarting or stopping the service the error disappeared. 

Thanks a lot for your reply reading the threats on that link helped me.

mcg

The agent mentioned in your error message is "NT SERVICE\SQLAgent$IBSQL2012".  For me it's very similar (NT SERVICE\SQLSERVERAGENT).  However, I see no way of adding this group to the "Launch and Activation Permission" of the application id.  When I go into the "Select Users, Computers, Service Accounts, or Groups" lookup box, this group doesn't show up.

I'm curious, were you able to lookup your "SQLAgent$IBSSQ2012" user/group and just add it and apply the 4 permissions?

Answer 4

Hi Rodd,

I'm so sorry for the delay, but i was off for few days, finally I granted the needed permissions to the agent mentioned in the error message and without restarting or stopping the service the error disappeared. 

Thanks a lot for your reply reading the threats on that link helped me.

mcg

Answer 5

thanks a lot, I will check