Event 10016
{03E09F3B-DCE4-44FE-A9CF-82D050827E1C} Warning

If we look the Windows Server 2022 Event System Log, we can see
Event 10016, APPID {03E09F3B-DCE4-44FE-A9CF-82D050827E1C} Warning:

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{21B896BF-008D-4D01-A27B-26061B960DD7}
and APPID
{03E09F3B-DCE4-44FE-A9CF-82D050827E1C}
to the user Win-Test\Administrator SID (S-1-5-21-379250145-3277397044-2374142293-500) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

 

Distributedcom warning 10016

 

Microsoft recommendation is (DCOM event ID 10016 is logged in Windows):
“These events can be safely ignored because they don’t adversely affect functionality and are by design. It’s the recommend action for these events.”

 

However, these warnings are very annoying and can confuse anyone, that something is wrongly configured.

 

In this case, the current logged in user does not have permission to Local Launch (Local Activation) DCOM Application with APPID, {03E09F3B-DCE4-44FE-A9CF-82D050827E1C}.

 

Solution:

 

We have to enable Local Launch (Local Activation) permission for Users group for DCOM Application with APPID, {03E09F3B-DCE4-44FE-A9CF-82D050827E1C} in Component Services application.

 

We have to open Component Services application as Administrator, Computers, My Computer, DCOM Config and select Detail View from View Menu.

From the list we can find the Application with APPID, {03E09F3B-DCE4-44FE-A9CF-82D050827E1C}.

 

Component Services 03e09f3b

 

If we right click on {03E09F3B-DCE4-44FE-A9CF-82D050827E1C} application and select Security Tab, everything is gray, because as administrator we don’t have permission to change DCOM Application permissions.

 

03e09f3b properties

 

It is easy to change permissions for selected Application with Registry Editor (regedit.exe).

With Edit/Find command, we can find {03E09F3B-DCE4-44FE-A9CF-82D050827E1C} Application ID in Registry.

It is located in HKEY_CLASSES_ROOT\AppId\{03E09F3B-DCE4-44FE-A9CF-82D050827E1C}.

 

03e09f3b registry

 

With right click and selected Permissions…, we can change permissions for selected AppId. First, we need to change the owner of registry Key.

Go to Advanced, change Owner to Administrators group (local Administrators group, if computer is a member of domain), select OK twice. Then open Permissions window once again and change permissions of Administrators group to Full Control.

 

03e09f3b permissions

 

Now, we have to open Component Services application as Administrator again, Computers, My Computer, DCOM Config and select Detail View from View Menu. If we right click on {03E09F3B-DCE4-44FE-A9CF-82D050827E1C} application and select Security Tab, we can edit Launch and Activation Permissions. When we click on Edit Button, we open the Launch and Activation Permission Window.

 

We have to Add Users group (local Users group, if computer is a member of domain). We have to set Local Launch and Local Activation Permissions for Users group.

 

03e09f3b launch permission

 

That’s it. We will not see Event 10016, APPID {03E09F3B-DCE4-44FE-A9CF-82D050827E1C} Warning any more in Windows Server 2022.

 

Enjoy!!!

 

Written by Simon Abolnar
I am a lecturer of Informatics subjects at Higher Vocational College at the School Center Nova Gorica, located in Slovenia-EU. I have been a System Administrator of Microsoft Servers at SCNG for over 20 years.