Restart into Safe Mode, browse to C:\Users right click UpdatusUser folder and Delete. From the list in the left side of the window select Windows Logs and System. Leave this dialog box open. They are unable to shutdown their database server. Log Name: System Source: Microsoft-Windows-Kernel-Power Date: 2022-11-02 12:46:24 AM Event ID: 41 Task Category: (63) Level: Critical Keywords: (70368744177664), (2) User: SYSTEM Computer: DESKTOP-BF72SBB Description: The system has rebooted without cleanly shutting down first . Level: Critical Keywords: User: SYSTEM Computer: DESKTOP-IVMQAED Description: The device HID-compliant headset (location (unknown)) is offline due to a user-mode driver crash. People who post these questions may even be irritated or. You may need to Take Ownership of the folder. As suggested by the title, my system has been crashing arbitrarily, and a view in the Event Log brings up Event ID 10016, followed by an Event ID 37 slowdown on all 8 logical processor cores. Step 4: In the pop-up window, choose Advanced to continue. In my case, I only had to fix one. Step 1: Open the Registry Editor window according to the same method listed above. Event ID 10016 Almost all Windows versions have found DistributedCOM Event ID 10016 on Windows Event Viewer. Has anyone found the fix for this? User Action: Verify that the user has the appropriate permissions to start the DCOM server. You can choose Launch and Activation Permissions, set to Customize, and Edit. Sir, Please suggest me some working steps to follow.. To assign permissions. Windows Shut down or restart by itself all the time for no reason. To stop the service go to Start/Search and type Services.msc. The DCOM error entries with the Event ID 10016 are now hidden from view. Windows will attempt to restart the device 5 more times. The issue is still persisting at my client site. 3 3 3 comments Best Add a Comment malccy72 1 yr. ago These 10016 events are recorded when Microsoft components try to access DCOM components without the required permissions. Here at TenForums.com we get lots of questions about Event ID 10016, which shows up in Event Viewer on nearly all Windows 10 PCs (and in modern Server versions as well, as it turns out). Do not provide filtered files. The basic error message was the same: The application-specific permission settings do not grant Local Activation permission for the COM Server application Getting a DCOM error with an Event ID. The system then crashes and requires a hard reboot. Start the Event Viewer and search for events related to the system shutdowns: Press the Win keybutton, search for the eventvwr and start the Event Viewer. If you are getting errors in Event Viewer with an ID of 10016 and more than one CLSID, then it could be that both RuntimeBrokers need to be fixed. 2.Type comexp.msc, and then click OK. Then close all browsers and locate the file you downloaded and double-click on it to install and run the program. Go to the Security tab, choose the appropriate action. Event ID 10016/DistributedCOM causes PC to shutdown and restart randomly. Click on the " Gather Logs " button. Right-click on each of them and choose Properties. 3.To locate your computer, click Component Services, click . SID (S-1-5-20) from address LocalHost (Using LRPC). To access the System log select the keyboard shortcut Win+R, type eventvwr.msc and press the ENTER key. To open Component Services and verify that the required security properties are set: 1.Click Start, and then click Run. The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue. On the General tab, you'll see Application ID, which should match the AppID from the error message. EventID 10016 Microsoft-Windows-DistributedCOM. 4. Date: 17-May-21 10:12:46 PM Event ID: 10111 Task Category: User-mode Driver problems. 3. Use Custom Install. 2. System Specs: -Gigabyte Aero 14 -i7-6700HQ Double click the nVidia Services and take the drop down arrow next to Start Up Type and choose Disable. application with CLSID {61738644-F196-11D0-9953-00C04FD919C1} to the user NT AUTHORITY\NETWORK SERVICE. It will fail with error event 10016. wscsvc will initiate after ~2 minutes and then everything will be instantiated as normal so you will have no side effects of these errors in the event log but it's annoying. Open Event Viewer. So I started checking the event logs and noticed I keep getting the same ERROR ID 10016, 3 such events everytime I initiate a sleep or a shutdown or a restart. A coding pattern has been implemented where the code first tries to access the DCOM components with one set of parameters. This Tutorial Helps to Fix DistributedCOM Event ID 10016 Error in Windows 10 & Windows 1100:00 Intro00:13 Find CLSID and APPID00:26 Open Registry Editor With. Place a checkmark on the " Accept License Agreement " checkbox and click the Next button. --> Another popup will appear and then Click "Copy To . Type the following IDs in the <All Event IDs> field and click OK : Expand Windows Logs System. Place the cursor on System, select Action from the Menu and Save All Events as (the default evtx file type) and give the file a name. Click the name that applies to you (PRIVATE-THINK\wongw) and click the appropriate permission. Step 3: Right-click it to choose Permissions to continue. Using Regedit, navigate to the following registry value HKCR\Clsid\clsid value\localserver32 The clsid value is the information displayed in the message. A DCOM Error Event ID 10016 occurs when a programs tried to start the DCOM server but it does have user permissions to be able to have access to the DCOM server.. Right-click on System and select Filter Current Log. Please contact the device . You solve this by changing the service wscsvc from delayed autostart to normal autostart. In this case, this behavior is expected and by design. Find the application by application name remembered in step 1 and right click the Properties. How to Fix DCOM Error 10016 on Windows 10The application-specific permission settings do not grant Local Activation permission for the COM Server application. Windows 10 - Event ID 10016 causing system crash Hello! My PC frequently shutdowns and restarts randomly and I when I look into the Event Viewer it says Source - DistributedCOM and Event ID 10016 are the causes. At the Top Left Corner of Speccy --> Click File and then Click Publish Snapshot Report, a window will popup and Click YES. Fix Random Shutdown - Kernel Power, Event ID 41 In Windows 10 Commands Used:sfc /scannowWe all experience computer errors from time to time and some Windows . 5. The Error message. Expand Windows Logs on the left panel and go to System. Step 2: In the pop-up window, navigate to the HKEY_CLASSES_ROOT\CLSID folder. ; In the right pane, double-click Default.The Edit String dialog box is displayed. Getting a DCOM error with an event ID 10016 means that a program tried to start the DCOM server with using the DCOM infrastructure, but the user doesn't have necessary permissions to do so. Click Filter current log Select the XML tab and enable Edit query manually Copy/Paste the above XML to the filter dialog, and click OK. This error will not crash your system immediately and you will not die suddenly at a blue screen. Click on the " Advanced Options " link for Forum Support options. The application-specific permission settings do not grant Local Activation permission for the COM Server.