Microsoft-Windows-DistributedCOM event ID 10016 ON SERVER 2016

[CY_liu]

Log Name: System

Source: Microsoft-Windows-DistributedCOM
Date: 10/23/2018 11:05:26 AM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: SERVER\Administrator
Computer: SERVER.bz.local
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user BZ\ADMINISTRATOR SID (S-1-5-21-2946991645-1812366459-2311584717-1110) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2018-10-23T03:05:26.435651900Z" />
<EventRecordID>16148</EventRecordID>
<Correlation />
<Execution ProcessID="536" ThreadID="2032" />
<Channel>System</Channel>
<Computer>SERVER.bz.local</Computer>
<Security UserID="S-1-5-21-2946991645-1812366459-2311584717-1110" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
<Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
<Data Name="param6">BZ</Data>
<Data Name="param7">ADMINISTRATOR</Data>
<Data Name="param8">S-1-5-21-2946991645-1812366459-2311584717-1110</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>

Continue reading...