Windows 10: DCOM settings ---COM security/Edit Limits

Hi, I want to enquiry something related to DCOM settings.I want to change the settings of "COM security/Edit Limits", but the option is grayed out.Can somebody guide me how to make the 2 buttons enabled. Thanks.I have attached the windows version and the issue below. Thanks.Window Server 2019 StandardJian

:)

 

Overclocking / Undervolting guide for Vega 56 or 64?

Here's a quick laundry list:

List of software to use for overclocking and testing
Examples:
Wattman (and how to find and use it, like an overview, including profiles)
Unigine Valley or Heaven (use this for quick testing while changing settings in Wattman and checking for stability / artifacts) ...just suggesting this
How to monitor cores / mem speeds and temps during testing (I've seen screen overlays, and others using GPUz)

Step-by step overclocking in Wattman
Fan speeds
Power limit
Temp limit
Voltages
Core speeds
Memory speeds

 

Cortana and DCOM Error Event 10016

My PC was giving many DCOM error 10016 involving Cortana as follows:

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user PC-PC\PC from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy.This security permission can be modified using the Component Services administrative tool.

I fixed this by giving Administrator permissions to the two registry keys mentioned above, by editing the registry as per these instructions:
Windows 10 Event 10016 Fix: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.I a – Quarter Five – Thoughts and Solutions

The next step is to change the DCOM settings in DCOM Config. I had to change the DCOM settings by going to Component Services, then opening Computers, then right clicking on My Computer then selecting Properties. Then under Access Permissions click "Edit Limits" and adding Administrators to the group.

After a PC reboot the errors no longer come up.

My question is, is adding Administrators to the group under Access Permissions a good way to do it, or is there a better way? Have I inadvertantly done something bad that will upset something else (so far so good).

 

DCOM security hardening changes

Hi,

Looking at the recently adjusted Microsoft KB article (KB5004442—Manage changes for Windows DCOM Server Security Feature Bypass (CVE-2021-26414) - Microsoft Support) (DCOM client-side patch on November 8, 2022), it appears that Microsoft has now introduced a client-side patch as well. Does that mean no changes are needed at the application (code) to accommodate the DCOM hardening changes? Will the legacy application work fine without any modification to the code to increase the DCOM security?