Skip to content

This post shows how to fix 'event 10016 error, The application-specific permission settings do not grant local activation permission' in Windows 10.

Some users upgraded to Windows 10 Anniversary Update (Version 1607) has reported that there are multiple entries of logs with error 10016 for DistributedCOM activities under Event Viewer. Following is the error description for this case:

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

As it is clearly evident from the error description that the SYSTEM object (NT AUTHORITY\SYSTEM) is missing Local Activation permissions for application with ID {F72671A9-012C-4725-9D2F-2A4D32D65169}. It prevents the application activities from being executed. The description also provides us very helpful hint to solve this error and that is to allot missing permissions to SYSTEM object by using Components Services tool.

So if you’re also the victim of this problem, here is how to get rid of it:

FIX : Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

Registry Disclaimer: The further steps will involve registry manipulation. Making mistakes while manipulating registry could affect your system adversely. So be careful while editing registry entries and create a System Restore point first.

1. Press W8K + R and put regedit in Run dialog box to open Registry Editor (if you’re not familiar with Registry Editor, then click here). Click OK.

Windows 10 Registry Editor

2. In the Registry Editor window, navigate to following registry key:

HKEY_CLASSES_ROOT\AppID\{F72671A9-012C-4725-9D2F-2A4D32D65169}

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

3. Right click on the {F72671A9-012C-4725-9D2F-2A4D32D65169} key and select Permissions. On the Permissions window shown below, hit Advanced button.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

4. Moving on, you’ll see that in Advanced Security Settings for key, the current owner is TrustedInstaller. Click on Change link there and take ownership using steps mentioned here.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

5. After taking ownership, you’ll be back to Permissions sheet shown below where you’ve to select your account and then SYSTEM under Group or user names section and then check the Allow box against Full Control. By doing this, you’re providing full control to yourself and SYSTEM to manage the registry key and its activities. Click Apply followed by OK.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

6. In the similar way, take the ownership of following key and give full control on permissions to yourself and SYSTEM, for it:

HKEY_CLASSES_ROOT\CLSID\{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

7. Press W8K + R and put dcomcnfg in Run dialog box and hit Enter key to open Component Services.

Component Services Windows 10

8. In Component Services window, navigate to Console Root > Components Services > My Computer > DCOM Config and click View > Details. Now scroll down and locate {F72671A9-012C-4725-9D2F-2A4D32D65169} Application ID. Right click on it and select Properties.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

9. Next, in the property sheet, switch to Security tab. Under Launch and Activation Permissions section, choose Customize. Then click Edit.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

10. Now in Launch and Activation Permission window, click Add button.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

11. On Select Users or Group, type the object name as SYSTEM and click Check Names. Your type SYSTEM will now be underlined and linked to SYSTEM object. Click OK.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

12. Back in Launch and Activation Permission window, select SYSTEM under Group or user names section. Now check the Allow box for Local Launch and Local Activation. Click OK. Close Components Services and Registry Editor.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

You can now reboot your machine. After multiple restarts and some hours/days, you’ll find that event error 10016 no longer occurs.

Here’s the video to help you more on this:

That’s it!


Facebook Google+ Twitter

24 Comments

  • After first step shows me that It can’t access.

  • Kapil Arya

    ^^ Give it a retry.

  • It shows yet windows with Launch and Activation Permission. I do this on Windows 10 Pro Au.
    What when the error 10016 has other param4 {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
    param5 {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} ?

    Regards

  • Kapil Arya

    ^^ Have you performed steps for HKEY_CLASSES_ROOT\AppID\{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and HKEY_CLASSES_ROOT\CLSID\{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}?

  • no Yet. I have done for F72671A9-012C-4725-9D2F-2A4D32D65169 now but I have yet event 10016 error with this above.
    Can I do this for HKEY_CLASSES_ROOT\AppID\{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and HKEY_CLASSES_ROOT\CLSID\{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}?

  • Another “Access Denied”. Hmmm

  • i did it all, and now i wonder what is the purpose what is this suposed to do, what program part did we fix, the key numbers dont give any clue, do you know what it is ?

  • Consider using this script:
    gallery.technet.microsoft.com/Grant-Revoke-Get-DCOM-22da5b96
    It’s much less work, and doesn’t change the default permissions on the registry keys

  • Kapil Arya

    ^^ Thanks for adding this 😊

  • Thanks for this article that helped me find where to set the permissions. Very happy.

  • Kapil Arya

    ^^ Glad it helped!

  • In step 8, I couldn’t find {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}. I have performed all the steps mentions before 8.

  • Kapil Arya

    ^^ Please recheck, it must be there :)

  • Do you have to be logged in as administrator to be able to find this registry entry and change permissions?

  • Kapil Arya

    ^^ I believe, yes!

  • I have multiple instances of Event 10016 Error in my Event log. But try as I may, I just cannot find HKEY_CLASSES_ROOT\AppID\{F72671A9-012C-4725-9D2F-2A4D32D65169} in my registry! So could you please be more specific about how to find it? Can I put something in the Find box and if so, what? And do I check all the boxes including match entire string? Finally, do I have to be logged on to my PC as an Administrator to perform this fix or can I run regedit as administrator and if so how?

  • hello, thank you for showing this.. i did the first 2 steps for permission, but the third step using dcomcnfg and going through that process, going to the security tab, then edit in the window of launch and activation, then brings me into the next step, but where you say to click add button, it is shaded, and i can not click through.. could you pls advice.. thanks..

  • @Aditya Rathee -> its there, search for the appid, not CLSID. in your case this should be 4839DDB7-58C2-48F5-8283-E1D1807D0D7D, or also “ShellServiceHost”

  • @Aditya Rathee, sorry for spam, but in addition at step 11 you need to also add LOCAL SERVICE and give it “Local Activation” rights

  • Kapil Arya

    ^^ Thanks for your inputs on this 😊

  • Hi, managed to fix 1st part – can´t find AppID´s (which were {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} and {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} in my eventlog) from dcomcnfg. Ideas how to proceed? Still getting 10016 error to eventlog.

  • Kapil Arya

    ^^ If you can’t find either of the IDs, there is no need to worry because DCOM 10016 errors are harmless to system and can be safely ignored 😊

  • Hello,

    I’ve followed your tutorial and on the step 10, the add button is disabled.i have administrator permission in this computer. What’s going on? Can you help me?

  • Kapil Arya

    ^^ Try enabling built-in admin account and sign in to it: https://www.kapilarya.com/how-to-enable-built-in-administrator-account-in-windows-10.

    See if you can perform step 10 then.

  • Leave a Reply

    Your email address will not be published. Required fields are marked *

    Recent Comments

    • arsa : when I write " ren LogonUI.exe " This message appears " the system c...

      13 hours ago

    • Dixie : Thank you so much for your help, problem solved....

      19 hours ago

    • Kapil Arya : ^^ Make sure you open Windows PowerShell as administrator....

      2 days ago