Windows 10: DCom permissions error freezes Dell Inspiron 15 laptop

I have been suffering intermittent freezes of my laptop that require me to hard crash since at least June 2019. They are becoming more frequent, and the only bit of data I have found is the last recorded item in the System Event log is the same DCom permissions error.


I've researched the issue as best I can, and this has happened (with and without frozen laptops) since Windows 8.1 and each time was the result of incorrect permissions settings on a system component (usually traced to a Windows patch). Since I can't figure out how to match the Event log application id to an actual application, I'm having trouble identifying the cause. However, I noticed the system fan load had a particular tone when hung (probably from 100% CPU usage).


It sounded the same today, but hadn't frozen yet, so I shut everything else down and checked Task Manager. The top item, taking 700 MB of memory among other system resources, was Windows Audio Device Graph Isolation. This is a system file that, according to a quick search, is designed to isolate the impact of changes by audio manufacturers. Assuming this is indeed the cause of the freezing, which is admittedly a leap but the last three Event log entries are once again the DCom error, so I have grounding, what do I need to reset the permissions to? I'd prefer to do it here than in regedit, for obvious reasons, and the error advises doing so in Component Services, but as far as I can tell, the listed clsids and appids don't exist there either (though it is the one place besides regedit where I've been able to find these types of ids).


I've put a copy of the error message below, and yes, I have scanned my system, use Windows Defender for an active scanner and added Malwarebytes to do a triggered deep scan, but my system is clean. All diagnostics have similarly come back clean, though the frequent hard crashes made some corruption which I fixed using the available system tools, but it has frozen since, so that wasn't the issue.


Warning 8/13/2019 4:51:33 PM DistributedCOM 10016 None
Warning 8/13/2019 4:47:24 PM DistributedCOM 10016 None
Warning 8/13/2019 4:03:18 PM DistributedCOM 10016 None


Log Name: System



Source: Microsoft-Windows-DistributedCOM



Date: 8/13/2019 4:51:33 PM



Event ID: 10016



Task Category: None



Level: Warning



Keywords: Classic



User: *MASKED*\*MASKED*



Computer: *MASKED*



Description:



The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID



{C2F03A33-21F5-47FA-B4BB-156362A2F239}



and APPID



{316CDED5-E4AE-4B15-9113-7055D84DCC97}



to the user *MASKED*\*MASKED* SID (S-1-5-21-3588853391-1882681473-1351989213-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.ShellExperienceHost_10.0.18362.145_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708). This security permission can be modified using the Component Services administrative tool.



Event Xml:



<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">



<System>



<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />



<EventID Qualifiers="0">10016</EventID>



<Version>0</Version>



<Level>3</Level>



<Task>0</Task>



<Opcode>0</Opcode>



<Keywords>0x8080000000000000</Keywords>



<TimeCreated SystemTime="2019-08-13T23:51:33.404624900Z" />



<EventRecordID>3771</EventRecordID>



<Correlation ActivityID="{e9d3a119-b011-490f-80e1-723bfd78a729}" />



<Execution ProcessID="1060" ThreadID="6500" />



<Channel>System</Channel>



<Computer>*MASKED*</Computer>



<Security UserID="S-1-5-21-3588853391-1882681473-1351989213-1001" />



</System>



<EventData>



<Data Name="param1">machine-default</Data>



<Data Name="param2">Local</Data>



<Data Name="param3">Activation</Data>



<Data Name="param4">{C2F03A33-21F5-47FA-B4BB-156362A2F239}</Data>



<Data Name="param5">{316CDED5-E4AE-4B15-9113-7055D84DCC97}</Data>



<Data Name="param6">*MASKED*</Data>



<Data Name="param7">*MASKED*</Data>



<Data Name="param8">S-1-5-21-3588853391-1882681473-1351989213-1001</Data>



<Data Name="param9">LocalHost (Using LRPC)</Data>



<Data Name="param10">Microsoft.Windows.ShellExperienceHost_10.0.18362.145_neutral_neutral_cw5n1h2txyewy</Data>



<Data Name="param11">S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708</Data>



</EventData>



</Event>









Log Name: System



Source: Microsoft-Windows-DistributedCOM



Date: 8/13/2019 4:47:24 PM



Event ID: 10016



Task Category: None



Level: Warning



Keywords: Classic



User: *MASKED*\*MASKED*



Computer: *MASKED*



Description:



The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID



{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}



and APPID



{15C20B67-12E7-4BB6-92BB-7AFF07997402}



to the user *MASKED*\*MASKED* SID (S-1-5-21-3588853391-1882681473-1351989213-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.



Event Xml:



<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">



<System>



<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />



<EventID Qualifiers="0">10016</EventID>



<Version>0</Version>



<Level>3</Level>



<Task>0</Task>



<Opcode>0</Opcode>



<Keywords>0x8080000000000000</Keywords>



<TimeCreated SystemTime="2019-08-13T23:47:24.513062700Z" />



<EventRecordID>3770</EventRecordID>



<Correlation ActivityID="{580e81c1-811f-47e0-a467-04070dfc18d3}" />



<Execution ProcessID="1060" ThreadID="15500" />



<Channel>System</Channel>



<Computer>*MASKED*</Computer>



<Security UserID="S-1-5-21-3588853391-1882681473-1351989213-1001" />



</System>



<EventData>



<Data Name="param1">application-specific</Data>



<Data Name="param2">Local</Data>



<Data Name="param3">Activation</Data>



<Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data>



<Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>



<Data Name="param6">*MASKED*</Data>



<Data Name="param7">*MASKED*</Data>



<Data Name="param8">S-1-5-21-3588853391-1882681473-1351989213-1001</Data>



<Data Name="param9">LocalHost (Using LRPC)</Data>



<Data Name="param10">Unavailable</Data>



<Data Name="param11">Unavailable</Data>



</EventData>



</Event>









Log Name: System



Source: Microsoft-Windows-DistributedCOM



Date: 8/13/2019 4:03:18 PM



Event ID: 10016



Task Category: None



Level: Warning



Keywords: Classic



User: *MASKED*\*MASKED*



Computer: *MASKED*



Description:



The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID



{C2F03A33-21F5-47FA-B4BB-156362A2F239}



and APPID



{316CDED5-E4AE-4B15-9113-7055D84DCC97}



to the user *MASKED*\*MASKED* SID (S-1-5-21-3588853391-1882681473-1351989213-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.ShellExperienceHost_10.0.18362.145_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708). This security permission can be modified using the Component Services administrative tool.



Event Xml:



<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">



<System>



<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />



<EventID Qualifiers="0">10016</EventID>



<Version>0</Version>



<Level>3</Level>



<Task>0</Task>



<Opcode>0</Opcode>



<Keywords>0x8080000000000000</Keywords>



<TimeCreated SystemTime="2019-08-13T23:03:18.310522700Z" />



<EventRecordID>3769</EventRecordID>



<Correlation ActivityID="{aee692e8-0ad1-4999-a618-926cb611d8cd}" />



<Execution ProcessID="1060" ThreadID="1344" />



<Channel>System</Channel>



<Computer>*MASKED*</Computer>



<Security UserID="S-1-5-21-3588853391-1882681473-1351989213-1001" />



</System>



<EventData>



<Data Name="param1">machine-default</Data>



<Data Name="param2">Local</Data>



<Data Name="param3">Activation</Data>



<Data Name="param4">{C2F03A33-21F5-47FA-B4BB-156362A2F239}</Data>



<Data Name="param5">{316CDED5-E4AE-4B15-9113-7055D84DCC97}</Data>



<Data Name="param6">*MASKED*</Data>



<Data Name="param7">*MASKED*</Data>



<Data Name="param8">S-1-5-21-3588853391-1882681473-1351989213-1001</Data>



<Data Name="param9">LocalHost (Using LRPC)</Data>



<Data Name="param10">Microsoft.Windows.ShellExperienceHost_10.0.18362.145_neutral_neutral_cw5n1h2txyewy</Data>



<Data Name="param11">S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708</Data>



</EventData>



</Event>

:)

 

Dell Inspiron 15 7537 freezes, can't open task manager, must reboot


As you can see below there are no yellow icons and black exclamation marks in device manager











The laptop has not froze up since last Thursday. I will perform the safe mode step and get back with you. Thanks for all of your help.

Paul

 

Can I Create Hackintosh Using DELL Inspiron 3542

I'd suggest reading through this thread on the Tonymacx86 forums.

 

Dell Inspiron 7537 Laptop & Creator's Upgrade


My Dell Inspiron 15 7537 laptop hasn't been offered the update to the Creator's Update via Windows Update yet and it doesn't appear on Dell's upgrade list. Has anyone updated their Inspiron 7537 to the Creator's Update via the Media Creation Tool or ISO file and did you have any problems?