FYI: Event 10016 error is harmless and present on most of Windows 11/10 running devices. Microsoft recommends to safely ignore this error. If you like, you can still fix it using this guide.

Some users upgraded to Windows 11/10 has reported that there are multiple entries of logs with error 10016 for DistributedCOM activities under Event Viewer. Following is the error description for this case:

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

As it is clearly evident from the error description that the SYSTEM object (NT AUTHORITY\SYSTEM) is missing Local Activation permissions for application with ID {F72671A9-012C-4725-9D2F-2A4D32D65169}. It prevents the application activities from being executed. The description also provides us very helpful hint to solve this error and that is to allot missing permissions to SYSTEM object by using Components Services tool.

So if you’re also the victim of this problem, here is how to get rid of it:

Fix: Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 11/10

Manual steps

Registry Disclaimer: The further steps will involve registry manipulation. Making mistakes while manipulating registry could affect your system adversely. So be careful while editing registry entries and create a System Restore point first.

1. Press W8K + R and type regedit in Run dialog box to open Registry Editor. Click OK.

Windows 10 Registry Editor

2. In the Registry Editor window, navigate to following registry key:

HKEY_CLASSES_ROOT\AppID\{F72671A9-012C-4725-9D2F-2A4D32D65169}

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

3. Right click on the {F72671A9-012C-4725-9D2F-2A4D32D65169} key and select Permissions. On the Permissions window shown below, hit Advanced button.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

4. Moving on, you’ll see that in Advanced Security Settings for key, the current owner is TrustedInstaller. Click on Change link there and take ownership using steps mentioned here.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

5. After taking ownership, you’ll be back to Permissions sheet shown below where you’ve to select your account and then SYSTEM under Group or user names section and then check the Allow box against Full Control. By doing this, you’re providing full control to yourself and SYSTEM to manage the registry key and its activities. Click Apply followed by OK.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

6. In the similar way, take the ownership of following key and give full control on permissions to yourself and SYSTEM, for it:

HKEY_CLASSES_ROOT\CLSID\{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

7. Press W8K + R and put dcomcnfg in Run dialog box and hit Enter key to open Component Services.

Component Services Windows 10

8. In Component Services window, navigate to Console Root > Components Services > My Computer > DCOM Config and click View > Details. Now scroll down and locate {F72671A9-012C-4725-9D2F-2A4D32D65169} Application ID. Right click on it and select Properties.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

9. Next, in the property sheet, switch to Security tab. Under Launch and Activation Permissions section, choose Customize. Then click Edit.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

10. Now in Launch and Activation Permission window, click Add button.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

11. On Select Users or Group, type the object name as SYSTEM and click Check Names. Your type SYSTEM will now be underlined and linked to SYSTEM object. Click OK.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

12. Back in Launch and Activation Permission window, select SYSTEM under Group or user names section. Now check the Allow box for Local Launch and Local Activation. Click OK. Close Components Services and Registry Editor.

FIX Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 10

You can now reboot your machine. After multiple restarts and some hours/days, you’ll find that event error 10016 no longer occurs.

Video fix

Here’s the video to help you more on this:

That’s it!

Originally written on Oct 23, 2016. Updated for Windows 11.

69 Comments

Add your comment

  • Dromandus

    After first step shows me that It can’t access.

  • Kapil Arya

    ^^ Give it a retry.

  • tomani

    It shows yet windows with Launch and Activation Permission. I do this on Windows 10 Pro Au.
    What when the error 10016 has other param4 {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
    param5 {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} ?

    Regards

  • Kapil Arya

    ^^ Have you performed steps for HKEY_CLASSES_ROOT\AppID\{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and HKEY_CLASSES_ROOT\CLSID\{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}?

  • Dromandus

    no Yet. I have done for F72671A9-012C-4725-9D2F-2A4D32D65169 now but I have yet event 10016 error with this above.
    Can I do this for HKEY_CLASSES_ROOT\AppID\{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and HKEY_CLASSES_ROOT\CLSID\{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}?

  • jdm

    Another “Access Denied”. Hmmm

  • peter

    i did it all, and now i wonder what is the purpose what is this suposed to do, what program part did we fix, the key numbers dont give any clue, do you know what it is ?

  • Tony MCP

    Consider using this script:
    gallery.technet.microsoft.com/Grant-Revoke-Get-DCOM-22da5b96
    It’s much less work, and doesn’t change the default permissions on the registry keys

  • Kapil Arya

    ^^ Thanks for adding this 😊

  • Michael

    Thanks for this article that helped me find where to set the permissions. Very happy.

  • Kapil Arya

    ^^ Glad it helped!

  • Aditya Rathee

    In step 8, I couldn’t find {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}. I have performed all the steps mentions before 8.

  • Kapil Arya

    ^^ Please recheck, it must be there :)

  • Shereen

    Do you have to be logged in as administrator to be able to find this registry entry and change permissions?

  • Kapil Arya

    ^^ I believe, yes!

  • Sherry Southam

    I have multiple instances of Event 10016 Error in my Event log. But try as I may, I just cannot find HKEY_CLASSES_ROOT\AppID\{F72671A9-012C-4725-9D2F-2A4D32D65169} in my registry! So could you please be more specific about how to find it? Can I put something in the Find box and if so, what? And do I check all the boxes including match entire string? Finally, do I have to be logged on to my PC as an Administrator to perform this fix or can I run regedit as administrator and if so how?

  • paris

    hello, thank you for showing this.. i did the first 2 steps for permission, but the third step using dcomcnfg and going through that process, going to the security tab, then edit in the window of launch and activation, then brings me into the next step, but where you say to click add button, it is shaded, and i can not click through.. could you pls advice.. thanks..

  • Colcho

    @Aditya Rathee -> its there, search for the appid, not CLSID. in your case this should be 4839DDB7-58C2-48F5-8283-E1D1807D0D7D, or also “ShellServiceHost”

  • Colcho

    @Aditya Rathee, sorry for spam, but in addition at step 11 you need to also add LOCAL SERVICE and give it “Local Activation” rights

  • Kapil Arya

    ^^ Thanks for your inputs on this 😊

  • HilleL

    Hi, managed to fix 1st part – can´t find AppID´s (which were {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} and {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} in my eventlog) from dcomcnfg. Ideas how to proceed? Still getting 10016 error to eventlog.

  • Kapil Arya

    ^^ If you can’t find either of the IDs, there is no need to worry because DCOM 10016 errors are harmless to system and can be safely ignored 😊

  • Ann Elyse Santos

    Hello,

    I’ve followed your tutorial and on the step 10, the add button is disabled.i have administrator permission in this computer. What’s going on? Can you help me?

  • Kapil Arya

    ^^ Try enabling built-in admin account and sign in to it: https://www.kapilarya.com/how-to-enable-built-in-administrator-account-in-windows-10.

    See if you can perform step 10 then.

  • spus23

    Hi, These errors are harmless to the system? You mean if we don’t count the fact my win10pro64bit laptop reboots multiple times a day due to them.

  • Kapil Arya

    ^^ There must be something else which is causing this. Are you sure the source of multiple reboots is DCOM 10016 errors?

  • Steve K

    Hi there, my ADD/REMOVE icons are grayed out in the “Launch and Activation Permission” window. Please advise how to proceed from here.

  • pete

    Hello Kapil. Are we really supposed to work through pages of instructions to fix a windows 10 bug event ID 10016? I do not understand the section taking ownership. In step 3 it is requested to enter the object name, what is this object? and why was it not input on the window. What is it supposed to find?
    thanks in dvance

  • Kapil Arya

    ^^ There is nothing to enter anything in my step 3. Which steps you’re trying?

  • Jason

    Hello,
    I have just followed your steps but 10016 still happening and it caused to my pc crashed. What can I do?

  • Kapil Arya

    ^^ Error 10016 won’t crash your system. Can you try clean boot: https://www.kapilarya.com/how-to-perform-clean-boot-in-windows-10

    Note that the error 10016 is present on most Windows 10 devices.

  • Alex

    I don’t have HKEY_CLASSES_ROOT\CLSID\{8D8F4F83-3594-4F07-8369-FC3C3CAE4919} instead I have this one: Computer\HKEY_CLASSES_ROOT\CLSID\{8D9945C3-A621-4F52-8641-6D8B755F42E2}. I checked it several times.

  • Alex

    This is my Windows Log Error: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
    and APPID
    {15C20B67-12E7-4BB6-92BB-7AFF07997402}

  • Kapil Arya

    ^^ Alex, if you couldn’t follow steps to resolve, you can ignore the error 10016 because it is not harmful and is present on most of Windows 10 devices.

  • Kirkh

    Dear Arya, I have followed the steps unitil number 7. Then with the dcomcnfg command I cannot find the {15C20B67-12E7-4BB6-92BB-7AFF07997402}, that was present in my registry but it is not present in dcomcnfg . I have this key {15533488-4A86-4DDA-B82C-DF60F640ADF4} and directly afterwards the {15c653f2-77f1-4cac-9644-656982d12f12}. The key {15C20B67-12E7-4BB6-92BB-7AFF07997402} should be between them. So it is strange that the line is absent.

  • Eduardo

    Dear Arya,
    I have the same problem as Kirkh, the AAPID shown on my event viewer is APPID
    {15C20B67-12E7-4BB6-92BB-7AFF07997402}, and i that APPID isnt shown in the DCOM Config folder. I’m experiencing computer freezes and i suspect it is because of this, since its the only error that appeared near the time of the computer freeze.

  • cdoublejj

    it simply says to take owner ship which the was i knew was a sub context option in a menu or a command so how the in the heck does that translate to “enter object name” menu?

  • cdoublejj

    NVM one needs to scroll all the way to bottom of that link. OR in other words: just assign your self or user the permissions to the appid.

  • Funksoulbrother

    @Alex & @Eduardo,

    This AppID is tied to PerAppRuntimeBroker. You can see this in regedit when you go to the key and check the Default/Standard value, which is set to PerAppRuntimeBroker.

    Within DCOM Config you search for PerAppRuntimeBroker. If you check the 2nd column you’ll notice the AppID (tadaa). If you already made the regedit changes continue follow the steps from 8/9.

    If you get a warning pop-up on step 9 click on ‘Delete/Remove’. If you click the Cancel button you’ll get a greyed out Security tab making it impossible to add the new user. So hit ‘Delete/Remove’ and you’ll be able to add the new SYSTEM user/group from steps 10 and onward.

    Took me a while to figure out that it was tied to the PerAppRuntimeBroker component. Hopefully this helps!

  • paul middleton

    HAHAHA are you kidding me, i think i will leave it as it is lloll

  • Martyn

    Many thanks for this, it worked like a charm. (After trying the solutions from some other websites, which all seem to be copied from one another and were incorrect.)

    There are a couple of things I would like to suggest. If you could make it clearer that people using this solution need to cut and paste the specific CLSID and AppID that they see in their event viewer logs into the registry items:

    HKEY_CLASSES_ROOT\CLSID\
    HKEY_CLASSES_ROOT\AppID\

    Mine were:

    CLSID = {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
    AppID = {15C20B67-12E7-4BB6-92BB-7AFF07997402}

    Also, they sould take note of the item in the CLSID, as this will be needed in the ‘dcomcnfg’ section. In my case it was:

    PerAppRuntimeBroker with AppID of {15C20B67-12E7-4BB6-92BB-7AFF07997402}

    Then, when they search the DCOM for their specific Application it’s easier to find the Application to be changed if it doesn’t have a NAME and Application id which are the same, i,e
    {F72671A9-012C-4725-9D2F-2A4D32D65169} and {F72671A9-012C-4725-9D2F-2A4D32D65169}

    Many thanks

  • Kapil Arya

    ^^ Thanks Martyn, your reply is extremely helpful to those facing this issue. Much appreciated!

  • Alan

    Thank you for all your help, you stated that Event 10016 is harmless however in my case it shuts down PC anytime I’m trying to do a bench test like heaven or try to load a game.

    Thank you

  • Ray

    Dear Kapil,
    I have been getting serious and very regular (what I understand is called) “Micro Stuttering” on my Win 10 PC (VERY regular freezing – although this only seems to affect the mouse). I did some research and then looked in Event Viewer.  Sure enough, there were loads of ‘Event 10016, DistributedCOM’ entries not granting ‘Local Activation permission’. The references were:

    CLSID      –       {C2F03A33-21F5-47FA-B4BB-156362A2F239} 
    APPID      –       {316CDED5-E4AE-4B15-9113-7055D84DCC97} 

    I did some more research and found various YouTube videos related to Fix DistributedCOM Error 10016 Windows 7, 8 And 10 and attempted to follow them.  I think that I managed to give (probably both) the administrators of my PC & also my User ‘permissions’.  This hasn’t solved the problem though and I am now getting the following different message in ‘Event Viewer’:

    “The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user DESKTOP-KOE5E6R\Ray SID (S-1-5-21-2623428506-2736062558-1878657602-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.ShellExperienceHost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708). This security permission can be modified using the Component Services administrative tool”.  

    I then did some more research and, as a result, came to the conclusion that additional ‘permissions’ are required and attempted to use ‘Component Services’ for this (as I believe is necessary).  Although I can access ‘Component Services’ OK, that where I’ve come to a halt because I’m unable to locate any item therein matching any of the ‘Event Viewer’ descriptions (and I’m by no means sure WHAT I’m looking for at this point!).

     I have been tearing my hair out for the last couple of days so would be VERY grateful indeed if you could assist/give any advice! 

    Kind regards,

    Ray 

    PS:  There are numerous “repair” programs listed on the web, but I’m very cautious about either making the problem worse (at least my PC is still running!) or importing malware.  Are you aware of any suitable/safe examples for this instance?Dear Kapil

  • Kapil Arya

    ^^ Ray, event 10016 error is harmless and occurs by design of the OS. You should not worry about it. The freezing on your system could be because of some another cause. Try to boot into Safe Mode and see if issue still occurs: https://www.kapilarya.com/how-to-boot-windows-10-into-safe-mode.

  • MT

    When I get to step 9, it’s already to set to Customize. Also, everything is greyed out. When I select Edit, I get a box saying: “One or more of the permission entries attached to the Registry Value has an unrecognised type and cannot be displayed.” I continue and SYSTEM is already there with Local Launch and Local Activation selected. Everything is greyed out. I still get the same warning in the Event Viewer but then I’ve only rebooted it once. In my case:

    Registry:
    CLSID = {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
    AppID = {15C20B67-12E7-4BB6-92BB-7AFF07997402}

    Component Services:
    PerAppRuntimeBroker with AppID of {15C20B67-12E7-4BB6-92BB-7AFF07997402}

    Thanks

  • Zaf Khan

    Hi Kapil, I understand this could be a shot in the dark, but here goes…
    I have a sapphire radeon vega 64 liquid cooled (www.sapphiretech.com/en/consumer/21275-00-radeon-rx-vega64-8g-hbm2-lc) vga card and of late (after updating the drivers) the pc freezes about once a day…. and I see that “Event 10016 Error” listed in the event viewer….

    What should I do?
    1) Roll back he driver to an earlier version? (current version 20.9.1)
    2) Update the driver to a later version? (latest version 20.11.1
    3) Or try the method above? (I’m worried about dcom security – not sure if i should worry ?)

  • Kapil Arya

    ^^ As said earlier, DCOM 10016 is harmless so you shouldn’t worry about it. As far as freezing is concerned, you can go ahead with points 1 and 2.

  • JJM

    Whether it is harmless or not, I just didn’t want any “Error” event being logged. This article certainly helped me to get rid of DCOM Error event. Thank you.

  • Kapil Arya

    ^^ Glad to help JJM!

  • Steve

    Hi Kapil, I’m trying to isolate why an app does not finish loading and reviewed the system log for the time I launch the app that hangs. This DCOM 10016 Warning appears and seems to be the only common thread. Might permissions be the the reason for the app to hang?

    Thanks,
    Steve

  • Kapil Arya

    ^^ It might be possible Steve!

  • Toronto Messmaker

    Thanks so much for this Kapil Arya!

    Also thank you Martyn for the additional and valuable clarification.

  • Kapil Arya

    ^^ Glad to help!

  • Selene

    This doesn’t work if you have Windows Home 10. I can’t even express how upsetting that is.

  • Kapil Arya

    ^^ This solution is applicable to all Windows 10 editions!

  • Danny

    Well I’m glad to know that one its harmless. I just starting getting them today, in a few hours I have 11k 10016 Warnings. I think it started after deleting two invisible, oddly named user accounts. No idea how they got there. I hate that a new one is generated every 30 seconds. But If you read down below, I have pasted Warnings Im suddenly getting now too, and I’m concerned what did I do? Any help would be much appreciated.
    Danny

    Log Name: System
    Source: Microsoft-Windows-DistributedCOM
    Date: 9/20/2021 2:48:55 PM
    Event ID: 10016
    Task Category: None
    Level: Warning
    Keywords: Classic
    User: ASUSF17\Danny
    Computer: AsusF17
    Description:
    The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
    {37399C92-DC3F-4B55-AE5B-811EE82398AD}
    and APPID
    {37399C92-DC3F-4B55-AE5B-811EE82398AD}
    to the user ASUSF17\Danny SID (S-1-5-21-429347077-1192707786-2631698525-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.GamingApp_2109.1001.8.0_x64__8wekyb3d8bbwe SID (S-1-15-2-1723189366-2159580849-2248400763-1481059666-1951766778-2756563051-3565589001). This security permission can be modified using the Component Services administrative tool.
    Event Xml:

    10016
    0
    3
    0
    0
    0x8080000000000000

    14665

    System
    AsusF17

    application-specific
    Local
    Activation
    {37399C92-DC3F-4B55-AE5B-811EE82398AD}
    {37399C92-DC3F-4B55-AE5B-811EE82398AD}
    ASUSF17
    Danny
    S-1-5-21-429347077-1192707786-2631698525-1001
    LocalHost (Using LRPC)
    Microsoft.GamingApp_2109.1001.8.0_x64__8wekyb3d8bbwe
    S-1-15-2-1723189366-2159580849-2248400763-1481059666-1951766778-2756563051-3565589001

    4 Criticals, 3 due to sudden shutdowns and 1 is:
    Critical 9/14/2021 4:46:19 PM Kernel-Power 41 (63)

    Of most concern I have a new Warnings tonight:
    Log Name: Microsoft-Windows-Dhcp-Client/Admin
    Source: Microsoft-Windows-Dhcp-Client
    Date: 9/20/2021 11:20:59 PM
    Event ID: 1001
    Task Category: Address Configuration State Event
    Level: Error
    Keywords: (1)
    User: LOCAL SERVICE
    Computer: AsusF17
    Description:
    Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0xEC2E9814DA83. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
    Event Xml:

    1001
    0
    2
    3
    75
    0x4000000000000001

    422

    Microsoft-Windows-Dhcp-Client/Admin
    AsusF17

    6
    EC2E9814DA83
    121

    One of these:

    Log Name: System
    Source: Schannel
    Date: 9/20/2021 5:30:01 AM
    Event ID: 36871
    Task Category: None
    Level: Error
    Keywords:
    User: SYSTEM
    Computer: AsusF17
    Description:
    A fatal error occurred while creating a TLS client credential. The internal error state is 10013.
    Event Xml:

    36871
    0
    2
    0
    0
    0x8000000000000000

    12985

    System
    AsusF17

    client
    10013

    And a dozen or so ‘disk’ Source warnings that I’m very concerned about:

    Log Name: System
    Source: disk
    Date: 9/21/2021 12:56:26 AM
    Event ID: 11
    Task Category: None
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: AsusF17
    Description:
    The driver detected a controller error on \Device\Harddisk6\DR6.
    Event Xml:

    11
    0
    2
    0
    0
    0x80000000000000

    17226

    System
    AsusF17

    \Device\Harddisk6\DR6
    0F00800001000000000000000B0004C0030100000000000000000000160000000000000000000000274AB70000000000FFFFFFFF06000000580000050000000000000612280108000000000073000000000000000000000080FCCC038684FFFF0000000000000000F00788008684FFFF000000000000000000000000000000001B000000010000000000000000000000000000000000000000000000000000000000000000000000

  • yudhya sudarmadi

    Dear Kapil Arya,

    I have problem and hard to solve,
    My problem is user suddenly disappear in access folder,
    do you have clue to find the root cause ?

    this user is AD user

    My workaround solution check user access in folder by powershell script, if user gone and then script will add it

    appreciate if you give clue to find the system that remove user from folder access
    regards
    Yudhya

  • David Watkins

    Shout out to Kapil and Funksoulbrother. I might be good to go now!

  • Kapil Arya

    ^^ Glad to help David!

  • Christopher Billingsley

    I cannot find {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

  • TrexxæByte

    I can find the CLSID in the registry, no problem… it’s the Components Snap-In that doesn’t seem to contain the AppID – I suspected as such, particularly since the AppID for the CLSID I looked up in the registry (and is filling my Event Log with ‘Warning’ messages) is the same as the CLSID.

    This threw me for a loop… especially after being unable to locate it in the Components SnapIn. Ugh…

  • Kapil Arya

    ^^ Well, DCOM 10016 is harmless so if you like, you can skip it, if you can’t follow above steps.

  • Jose

    DCOM 10016 is affecting my computer it turns off every time apparently DCOM is the 10016. I did every step yet I can’t find CLSID and APPID in the component services. I watch all the youtube videos.

  • Troy

    Any reason you don’t set the AppID and CLSID back to owner NT Service\TrustedInstaller and remove full permissions from SYSTEM and Administrators when done?

  • CuriousTechie

    Since it’s a harmless error and supposedly supposedly functioning as intended, wouldn’t it be better to let it be and not allow activating? And instead, just turn off logging of that event or are there security concerns for simply disabling logging of that event?

  • Kapil Arya

    ^^ AFAIK, turning off logging specifically not possible.

  • Scott

    So many steps, yet completely useless. Fooled me though. Looked legit.

  • Dave Burbridge

    I can do steps 1-4, and change ownership. However, when I try step 5, I too get “access denied”. And yes, I tried it again. So no success for me.

    Interesting the number of times it’s stated as being “completely harmless” – yet it’s clearly related to issues I’m having.
    I have a Win10 server running a few Java progs all the time. They are started from the Task Scheduler (and restarted every day at 2am, just to ensure they are running.)
    Not infrequently I find (from the logs) that they have suddenly stopped working – and remain so until the following day at 2am. *Always* when there’s been such a freeze, I check in the event viewer and find the error 10016 at the time of the last log write.
    Now, you could argue over cause and effect – but I never used to get this when running on a desktop Win7 system…

  • Leave a Reply

    Your email address will not be published. Required fields are marked *