Windows 10: EventID 10016 - NT AUTHORITY\SYSTEM - name not found

Hi all!
This is the problem I am facing:

Code: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.[/quote] AND

Code: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.[/quote] So far i have tried the solution as described here:

Error - Event ID DistributedCOM - Microsoft Community
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

All works fine, until i have to add "NT AUTHORITY\SYSTEM" in the final step. Windows tells me that this name can not be found. Google told me, that NT AUTHORITY\SYSTEM has something to do with SQL so i went ahead and installed from the MS homepage.

I am running W10Pro (fresh install one week ago) with all the latest updates. All drivers up to date.

Any ideas of what i could try next? This issue seems to be responsible for crashes every few hours *Mad*Sleepy*Sad

:)

 

Showing Error messages 10016 in Event Viewer on Windows 10

Original title: Win 10 undate nightmare error messages 10016

after installing updates in Nov

tons of error message

Description: Failed with 0x490 modifying AppModel Runtime status for package Microsoft.WindowsStore_2015.25.24.0_x64__8wekyb3d8bbwe for user Thomas-PC\Thomas (current status = 0x0, desired status = 0x20).

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />

<EventID>69</EventID>

<Version>0</Version>

<Level>2</Level>

error 10016

og Name: System

Source: Microsoft-Windows-DistributedCOM

Date: 1/30/2016 4:04:49 PM

Event ID: 10016

Task Category: None

Level: Error

Keywords: Classic

User: LOCAL SERVICE

Computer: Thomas-PC

Description:

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{D63B10C5-BB46-4990-A94F-E40B9D520160}

and APPID

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />

<EventID Qualifiers="0">10016</EventID>

there seems to be no fixes available for Windows 10 and the problems just seem to be getting worse

searching for fixes hard to determine what actually works and what just fluff or some one trying to sell soemthing

 

DistributedCOM error event id 10016 windows 10

I would really like to know why Build 1607 has so many major sleep/hibernate watchdog timer problems and this stupid Dcom EventID 10016 error due to permissions on top of that

It seems my Windows 10 Professional build 1607 has no NT AUTHORITY\NETWORK SERVICE user or group nor does it have any group or user close. So what is the solution then ?

 

same last weekend , here is my post from then....... for the 1st one , the second one appear once or twice after that then stopped.

Local Activation Permission - Page 3 - Windows 10 Forums

 

Thank you, but unfortunately this did not help. I tried some additional options, but nothing worked.
I reinstalled windows only to find this problem exists directly after installation. I even tried creating a new installation medium only to find the same result.

Any ideas? Can this be hardware related? Help is VERY appreciated! *frustration*

 

no sorry , it was the same for me after a clean install of AU.222 last weekend, it is a permissions error and common from my reading , 10016 and the CAPI2 errors both, the advice there worked for me I think (so far) though I get an odd 10010 error too.

You didn't say what errors you got etc, so I can't help , this is not my forte, but @f14tomcat helped me , so hopefully he will see this mention and be able to help you too...

KB

 

@Kbird, I'll be happy to help Gelo31415. I just getting ready to hit the sack. 9:20 here. I'll check back in the morning. If he's not on, I'll post some instructions with pics. OK?

 

Thx F14 , i'll check in tomorrow too incase I can help.


KB

 

Hi Tomcat,
thanks for the reply. Being online at the same time will be a bit tricky as i live in Europe. What information do you need?
Best,
Gelo.

 

@Gelo31415 Good morning (afternoon)!

It looks like you know the mechanics of how to do the changes in Regedit and Component services. Let me know if not.

The names and CLSID's MS uses can get tricky and hard to find, or spell correctly. I have included a quick little cheat-sheet for some more common DCOM errors. Also a zip of the cheat-sheet if you want.

DCOM Errors Fixes.zip

Dcom errors and clsid's ... fixes with regedit and component services

--------------------------------------------------------------------------------------------------------

Copy/Paste these names

Change ownership in Regedit to: administrators
Give FULL authority.

When finished all Component Services
work, change ownership back to: NT SERVICE\TrustedInstaller

In each case, enter the user group/name and click "Check Names"
to get the correct internal name. Then all the Apply's and OK's.


TIP: In Regedit, once you have searched and found the key to change, add it to you Favorites at the top of the screen. That will make it easy to get to and provide you with a record of what you have changed.

---------------------------------------------------------------------------------------------------------

Some of the more common DCOM errors are:

CLSID in Regedit: ............................................ Component Services ......... Add Local Activation for:
-------------------------------------------------------------------------------------------------------------------------------

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276} - Runtime Broker ................. NETWORK SERVICE

{7006698D-2974-4091-A424-85DD0B909E23} - Windows Insider Service .... dhubb {sub YOUR User ID}

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D} - Shell Service Host ............. local service

{F72671A9-012C-4725-9D2F-2A4D32D65169} -- {F72671A9-012C-4725....... system

{316CDED5-E4AE-4B15-9113-7055D84DCC97} -- Immersive Shell ............... dhubb {sub YOUR User ID}

In each case, enter the user group/name and click "Check Names"
to get the correct internal name. Then all the Apply's and OK's.

If you need Pics of these procedures, let me know and I will provide.

In your particular case, try this line from above:

CLSID in Regedit: ............................................ Component Services ......... Add Local Activation for:
-------------------------------------------------------------------------------------------------------------------------------
{F72671A9-012C-4725-9D2F-2A4D32D65169} -- {F72671A9-012C-4725....... system


Let me know if this is clear enough and if it helps.

TC

 

I looked at my rewritten instructions in the other post and I now think part is wrong that I copy and pasted from Vaio7......

Local Activation Permission - Page 3 - Windows 10 Forums


can you confirm F14 and i will edit it.....

ie Same for the HKEY>LocalMachine\Appid. ( as seen in event log)

Error? perhaps should be HKEY_CLASSES_ROOT\AppID\NOT HKEY_LOCAL_MACHINE >AppID ?

Yes confirmed...............HKEY_CLASSES_ROOT\AppID\


KB

 

I now realise I followed this info found in several posts on TenForums
to the correct locations for the 10016 Error involving

CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169}

1. Open Regedit.
2. Go to HKEY_Classes_Root\CLSID\*CLSID*.
Note: *CLSID* stand for the ID that appears in your event viewer error.
3. Right click on it then select permission.
4. Click Advance and change the owner to Administrators. Also click the box that will appear below the owner line.
5. Apply full control.
6. Close the tab then go to HKEY_LocalMachine\Software\Classes\AppID\*APPID*.
Note: *AppID* is the ID that appears in your event viewer.
7. Right click on it then select permissions.
8. Click Advance and change the owner to Administrators (not Administrator).
9. Click the box that will appear below the owner line.
10. Click Apply and grant full control to Administrators. (leave REGEDIT open)
10a. If the Default Value for the Key = "Value not set" see the note below instead of going to 11

11. Press Windows key and R, to bring up the RUN box.
12. Type dcomcnfg and <enter>
13. Click Computers, click My Computer, then click DCOM Config.
14. Look for the corresponding service (in the Name column) that appears as the *AppID* (F72671A9.....)
15. Right click on it then click properties.
16. Click security tab then click Customize in the Launch and Activation permissions section if needed. Click Edit. Click Add. Type Local Service in Object Names. Click Check Names (Ok?) Then OK button.
17. Select Local Service Under User Names and Tick the Local Activation box.
(Local Launch should be checked already)
18. Click OK , then OK again and Close Component Services.
19. Now go back to regedit and for the CLSID & APPID where you changed ownerships and
revert them back to the default TrustedInstaller by Copy and pasting this :

NT SERVICE\TrustedInstaller

***note
If this does not work and you still get the 10016 Error on Booting it is likely due to the fact that the usual fix cannot be made because the Default isn't listed (ie seen as "value not set") for Local Machine registry entry
App ID {F72671A9-012C-4725-9D2F-2A4D32D65169}. Thus, it's unknown what DCOMCNFG item to open, so that Local Service and Local Activation can be added. So the fix here is to just delete the Key instead after Exporting it for Safety, and then on reboot open Dcom again and you will be prompted to update a missing entry, (Say Ok) . Thereafter the AppID reappears in the registry and its default is listed as CDP Remote Text Handler and No further edits/additions need be made to that entry in Dcom or the Registry.

KB

 

Hi, @Kbird ... I was working on 8.1 Patch Tuesday stuff.

To use one of Gelo31415's examples, it is:
Computer\HKEY_CLASSES_ROOT\AppID\{9CA88EE3-ACB7-47c8-AFC4-AB702511C276}

I've never had to change ownership on the Com Server CLSID, only the AppID. The Com Server has no permissions, per se, in DCOM Components, only the APPID. The Com Server application invokes (runs) the APPID and you need to have the proper permissions to locally activate that APPID or the Com Server App throws an error.

Yes, it's confusing. MS does their best......

Code: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.[/quote] TC

 

TC[/quote]
THX TC I will edit my other posts , so no one get confused .......

Thankfully no issues on PC1 after Patch tuesday here , the others (Older pcs) have not mentioned it yet....

KB

 

Thanks for the effort! Now one of the errors is gone but i got two new ones. Here are the three:

eventid 10016
Code: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.[/quote] eventid 10010
Code: The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout.[/quote] Eventid 10010
Code: The server microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout.[/quote] Best,
Gelo.