DCom Error 10016 Errors on Windows 2016 Server

rr-4098 1,621 Reputation points
2024-11-22T14:13:49.84+00:00

Anytime IIS or the IIS App pools are restarted, the event logs show DCom errors and I have traced the GUID listed to the Runtimebroker. Everything I have read online states Runtimebroker is tied to Microsoft Store Apps. My question is this is a server running IIS and nothing else. Is there anyway for me to figure our what or why this error happen every time IIS is restarted. Besides this the server is running fine.

Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,532 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,312 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Yanhong Liu 13,185 Reputation points Microsoft Vendor
    2024-11-26T01:24:20.3966667+00:00

    Hello,

    The DCOM event ID 10016 errors occur when Microsoft components try to access DCOM components without the required permissions. This behavior is expected and by design. The errors are logged when the code first tries to access the DCOM components with one set of parameters and, if unsuccessful, tries again with another set of parameters.

    To resolve these errors, you can modify the security permissions using the Component Services administrative tool. Here are the steps:

    1. Open the Event Viewer and note the CLSID and APPID from the error message.
    2. Open the Registry Editor (regedit.exe) as an administrator.
    3. Navigate to HKEY_CLASSES_ROOT\CLSID\{CLSID} and note the application name.
    4. Right-click the key and select Permissions, then click Advanced.
    5. Change the owner to your administrator account and grant full permissions.
    6. Repeat the process for HKEY_CLASSES_ROOT\AppID\{APPID}.
    7. Open Component Services (comexp.msc) as an administrator.
    8. Navigate to Component Services -> Computers -> My Computer -> DCOM Config.
    9. Find the application name, right-click, and select Properties.
    10. Go to the Security tab, choose Launch and Activation Permissions, set to Customize, and click Edit.
    11. Add the SYSTEM account and set Local Activation to Allow.

    For more details, please refer to the documents:

    DCOM event ID 10016 is logged in Windows Server 2016

    DCOM events showing up after every restart

    I hope the information above is helpful.

    Best Regards,

    Yanhong Liu

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.