Hello,
The DCOM event ID 10016 errors occur when Microsoft components try to access DCOM components without the required permissions. This behavior is expected and by design. The errors are logged when the code first tries to access the DCOM components with one set of parameters and, if unsuccessful, tries again with another set of parameters.
To resolve these errors, you can modify the security permissions using the Component Services administrative tool. Here are the steps:
- Open the Event Viewer and note the CLSID and APPID from the error message.
- Open the Registry Editor (regedit.exe) as an administrator.
- Navigate to
HKEY_CLASSES_ROOT\CLSID\{CLSID}
and note the application name. - Right-click the key and select Permissions, then click Advanced.
- Change the owner to your administrator account and grant full permissions.
- Repeat the process for
HKEY_CLASSES_ROOT\AppID\{APPID}
. - Open Component Services (comexp.msc) as an administrator.
- Navigate to Component Services -> Computers -> My Computer -> DCOM Config.
- Find the application name, right-click, and select Properties.
- Go to the Security tab, choose Launch and Activation Permissions, set to Customize, and click Edit.
- Add the SYSTEM account and set Local Activation to Allow.
For more details, please refer to the documents:
DCOM event ID 10016 is logged in Windows Server 2016
DCOM events showing up after every restart
I hope the information above is helpful.
Best Regards,
Yanhong Liu
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.