You get the event ID 10016 with the following description on your Windows Server:

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
and APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

This tip only Apply if you have the following ID in your log event: 344ED43D-D086-4961-86A6-1106F4ACAD9B
Steps must be done with and Administrator account

First, start the Registry editor : regedit
Press CTRL+F and search for the following key: 344ED43D-D086-4961-86A6-1106F4ACAD9B

The result must be located in HKEY_CLASS_ROOT\AppID\

Right-click the key 344ED43D-D086-4961-86A6-1106F4ACAD9B and press Permissions

Go to the Advanced tab

Change the owner to Local Administrators

Now from the permissions window, change the rights to Full Control for SYSTEM and Local Administrators then apply

Back to the registry editor, check that the value LocalService on the right pane is IPBusEnum and then start the Component Services snapp-in (look for component in the start menu)
Search for the component IPBusEnum in Computers → My Computer → DCOM Config and go to Properties

Go to the security tab and edit the Launch and Activation Permissions 

set the SYSTEM account as Local Launch
 Now, restart the server and the event ID should be gone.
blog comments powered by Disqus