Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 2017-11-16-Thu 5:59:23 AM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: IE-DELL-PC\IE
Computer: IE-DELL-PC
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{9B1F122C-2982-4E91-AA8B-E071D54F2A4D}
and APPID
{653C5148-4DCE-4905-9CFD-1B23662D3D9E}
to the user IE-DELL-PC\IE SID (S-1-5-21-1849313865-1520466201-311305386-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-11-15T20:59:23.000000000Z" />
<EventRecordID>571731</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>IE-DELL-PC</Computer>
<Security UserID="S-1-5-21-1849313865-1520466201-311305386-1000" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{9B1F122C-2982-4E91-AA8B-E071D54F2A4D}</Data>
<Data Name="param5">{653C5148-4DCE-4905-9CFD-1B23662D3D9E}</Data>
<Data Name="param6">IE-DELL-PC</Data>
<Data Name="param7">IE</Data>
<Data Name="param8">S-1-5-21-1849313865-1520466201-311305386-1000</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
</EventData>
</Event>
где {9B1F122C-2982-4E91-AA8B-E071D54F2A4D} - это CAutoUpdate Class 1.0
а {653C5148-4DCE-4905-9CFD-1B23662D3D9E} - это Windows Update Agent + SUSInternalUpgrade Class 1.0
