FYI: Event 10016 error is harmless and present on most of Windows 11/10 running devices. Microsoft recommends to safely ignore this error. If you like, you can still fix it using this guide.
Some users upgraded to Windows 11/10 has reported that there are multiple entries of logs with error 10016 for DistributedCOM activities under Event Viewer. Following is the error description for this case:
As it is clearly evident from the error description that the SYSTEM object (NT AUTHORITY\SYSTEM) is missing Local Activation permissions for application with ID {F72671A9-012C-4725-9D2F-2A4D32D65169}. It prevents the application activities from being executed. The description also provides us very helpful hint to solve this error and that is to allot missing permissions to SYSTEM object by using Components Services tool.
So if you’re also the victim of this problem, here is how to get rid of it:
Page Contents
Fix: Event 10016 Error, The Application-Specific Permission Settings Do Not Grant Local Activation Permission In Windows 11/10
Manual steps
Registry Disclaimer: The further steps will involve registry manipulation. Making mistakes while manipulating registry could affect your system adversely. So be careful while editing registry entries and create a System Restore point first.
1. Press 
+ R and type regedit in Run dialog box to open Registry Editor. Click OK.
2. In the Registry Editor window, navigate to following registry key:
HKEY_CLASSES_ROOT\AppID\{F72671A9-012C-4725-9D2F-2A4D32D65169}
3. Right click on the {F72671A9-012C-4725-9D2F-2A4D32D65169} key and select Permissions. On the Permissions window shown below, hit Advanced button.
4. Moving on, you’ll see that in Advanced Security Settings for key, the current owner is TrustedInstaller. Click on Change link there and take ownership using steps mentioned here.
5. After taking ownership, you’ll be back to Permissions sheet shown below where you’ve to select your account and then SYSTEM under Group or user names section and then check the Allow box against Full Control. By doing this, you’re providing full control to yourself and SYSTEM to manage the registry key and its activities. Click Apply followed by OK.
6. In the similar way, take the ownership of following key and give full control on permissions to yourself and SYSTEM, for it:
HKEY_CLASSES_ROOT\CLSID\{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
7. Press + R and put dcomcnfg in Run dialog box and hit Enter key to open Component Services.
8. In Component Services window, navigate to Console Root > Components Services > My Computer > DCOM Config and click View > Details. Now scroll down and locate {F72671A9-012C-4725-9D2F-2A4D32D65169} Application ID. Right click on it and select Properties.
9. Next, in the property sheet, switch to Security tab. Under Launch and Activation Permissions section, choose Customize. Then click Edit.
10. Now in Launch and Activation Permission window, click Add button.
11. On Select Users or Group, type the object name as SYSTEM and click Check Names. Your type SYSTEM will now be underlined and linked to SYSTEM object. Click OK.
12. Back in Launch and Activation Permission window, select SYSTEM under Group or user names section. Now check the Allow box for Local Launch and Local Activation. Click OK. Close Components Services and Registry Editor.
You can now reboot your machine. After multiple restarts and some hours/days, you’ll find that event error 10016 no longer occurs.
Video fix
Here’s the video to help you more on this:
That’s it!
Originally written on Oct 23, 2016. Updated for Windows 11.
73 Comments
Add your comment
After first step shows me that It can’t access.
^^ Give it a retry.
It shows yet windows with Launch and Activation Permission. I do this on Windows 10 Pro Au.
What when the error 10016 has other param4 {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
param5 {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} ?
Regards
^^ Have you performed steps for HKEY_CLASSES_ROOT\AppID\{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and HKEY_CLASSES_ROOT\CLSID\{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}?
no Yet. I have done for F72671A9-012C-4725-9D2F-2A4D32D65169 now but I have yet event 10016 error with this above.
Can I do this for HKEY_CLASSES_ROOT\AppID\{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and HKEY_CLASSES_ROOT\CLSID\{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}?
Another “Access Denied”. Hmmm
i did it all, and now i wonder what is the purpose what is this suposed to do, what program part did we fix, the key numbers dont give any clue, do you know what it is ?
Consider using this script:
gallery.technet.microsoft.com/Grant-Revoke-Get-DCOM-22da5b96
It’s much less work, and doesn’t change the default permissions on the registry keys
^^ Thanks for adding this 😊
Thanks for this article that helped me find where to set the permissions. Very happy.
^^ Glad it helped!
In step 8, I couldn’t find {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}. I have performed all the steps mentions before 8.
^^ Please recheck, it must be there :)
Do you have to be logged in as administrator to be able to find this registry entry and change permissions?
^^ I believe, yes!
I have multiple instances of Event 10016 Error in my Event log. But try as I may, I just cannot find HKEY_CLASSES_ROOT\AppID\{F72671A9-012C-4725-9D2F-2A4D32D65169} in my registry! So could you please be more specific about how to find it? Can I put something in the Find box and if so, what? And do I check all the boxes including match entire string? Finally, do I have to be logged on to my PC as an Administrator to perform this fix or can I run regedit as administrator and if so how?
hello, thank you for showing this.. i did the first 2 steps for permission, but the third step using dcomcnfg and going through that process, going to the security tab, then edit in the window of launch and activation, then brings me into the next step, but where you say to click add button, it is shaded, and i can not click through.. could you pls advice.. thanks..
@Aditya Rathee -> its there, search for the appid, not CLSID. in your case this should be 4839DDB7-58C2-48F5-8283-E1D1807D0D7D, or also “ShellServiceHost”
@Aditya Rathee, sorry for spam, but in addition at step 11 you need to also add LOCAL SERVICE and give it “Local Activation” rights
^^ Thanks for your inputs on this 😊
Hi, managed to fix 1st part – can´t find AppID´s (which were {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} and {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} in my eventlog) from dcomcnfg. Ideas how to proceed? Still getting 10016 error to eventlog.
^^ If you can’t find either of the IDs, there is no need to worry because DCOM 10016 errors are harmless to system and can be safely ignored 😊
Hello,
I’ve followed your tutorial and on the step 10, the add button is disabled.i have administrator permission in this computer. What’s going on? Can you help me?
^^ Try enabling built-in admin account and sign in to it: https://www.kapilarya.com/how-to-enable-built-in-administrator-account-in-windows-10.
See if you can perform step 10 then.
Hi, These errors are harmless to the system? You mean if we don’t count the fact my win10pro64bit laptop reboots multiple times a day due to them.
^^ There must be something else which is causing this. Are you sure the source of multiple reboots is DCOM 10016 errors?
Hi there, my ADD/REMOVE icons are grayed out in the “Launch and Activation Permission” window. Please advise how to proceed from here.
Hello Kapil. Are we really supposed to work through pages of instructions to fix a windows 10 bug event ID 10016? I do not understand the section taking ownership. In step 3 it is requested to enter the object name, what is this object? and why was it not input on the window. What is it supposed to find?
thanks in dvance
^^ There is nothing to enter anything in my step 3. Which steps you’re trying?
Hello,
I have just followed your steps but 10016 still happening and it caused to my pc crashed. What can I do?
^^ Error 10016 won’t crash your system. Can you try clean boot: https://www.kapilarya.com/how-to-perform-clean-boot-in-windows-10
Note that the error 10016 is present on most Windows 10 devices.
I don’t have HKEY_CLASSES_ROOT\CLSID\{8D8F4F83-3594-4F07-8369-FC3C3CAE4919} instead I have this one: Computer\HKEY_CLASSES_ROOT\CLSID\{8D9945C3-A621-4F52-8641-6D8B755F42E2}. I checked it several times.
This is my Windows Log Error: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
^^ Alex, if you couldn’t follow steps to resolve, you can ignore the error 10016 because it is not harmful and is present on most of Windows 10 devices.
Dear Arya, I have followed the steps unitil number 7. Then with the dcomcnfg command I cannot find the {15C20B67-12E7-4BB6-92BB-7AFF07997402}, that was present in my registry but it is not present in dcomcnfg . I have this key {15533488-4A86-4DDA-B82C-DF60F640ADF4} and directly afterwards the {15c653f2-77f1-4cac-9644-656982d12f12}. The key {15C20B67-12E7-4BB6-92BB-7AFF07997402} should be between them. So it is strange that the line is absent.
Dear Arya,
I have the same problem as Kirkh, the AAPID shown on my event viewer is APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}, and i that APPID isnt shown in the DCOM Config folder. I’m experiencing computer freezes and i suspect it is because of this, since its the only error that appeared near the time of the computer freeze.
it simply says to take owner ship which the was i knew was a sub context option in a menu or a command so how the in the heck does that translate to “enter object name” menu?
NVM one needs to scroll all the way to bottom of that link. OR in other words: just assign your self or user the permissions to the appid.
@Alex & @Eduardo,
This AppID is tied to PerAppRuntimeBroker. You can see this in regedit when you go to the key and check the Default/Standard value, which is set to PerAppRuntimeBroker.
Within DCOM Config you search for PerAppRuntimeBroker. If you check the 2nd column you’ll notice the AppID (tadaa). If you already made the regedit changes continue follow the steps from 8/9.
If you get a warning pop-up on step 9 click on ‘Delete/Remove’. If you click the Cancel button you’ll get a greyed out Security tab making it impossible to add the new user. So hit ‘Delete/Remove’ and you’ll be able to add the new SYSTEM user/group from steps 10 and onward.
Took me a while to figure out that it was tied to the PerAppRuntimeBroker component. Hopefully this helps!
HAHAHA are you kidding me, i think i will leave it as it is lloll
Many thanks for this, it worked like a charm. (After trying the solutions from some other websites, which all seem to be copied from one another and were incorrect.)
There are a couple of things I would like to suggest. If you could make it clearer that people using this solution need to cut and paste the specific CLSID and AppID that they see in their event viewer logs into the registry items:
HKEY_CLASSES_ROOT\CLSID\
HKEY_CLASSES_ROOT\AppID\
Mine were:
CLSID = {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
AppID = {15C20B67-12E7-4BB6-92BB-7AFF07997402}
Also, they sould take note of the item in the CLSID, as this will be needed in the ‘dcomcnfg’ section. In my case it was:
PerAppRuntimeBroker with AppID of {15C20B67-12E7-4BB6-92BB-7AFF07997402}
Then, when they search the DCOM for their specific Application it’s easier to find the Application to be changed if it doesn’t have a NAME and Application id which are the same, i,e
{F72671A9-012C-4725-9D2F-2A4D32D65169} and {F72671A9-012C-4725-9D2F-2A4D32D65169}
Many thanks
^^ Thanks Martyn, your reply is extremely helpful to those facing this issue. Much appreciated!
Thank you for all your help, you stated that Event 10016 is harmless however in my case it shuts down PC anytime I’m trying to do a bench test like heaven or try to load a game.
Thank you
Dear Kapil,
I have been getting serious and very regular (what I understand is called) “Micro Stuttering” on my Win 10 PC (VERY regular freezing – although this only seems to affect the mouse). I did some research and then looked in Event Viewer. Sure enough, there were loads of ‘Event 10016, DistributedCOM’ entries not granting ‘Local Activation permission’. The references were:
CLSID – {C2F03A33-21F5-47FA-B4BB-156362A2F239}
APPID – {316CDED5-E4AE-4B15-9113-7055D84DCC97}
I did some more research and found various YouTube videos related to Fix DistributedCOM Error 10016 Windows 7, 8 And 10 and attempted to follow them. I think that I managed to give (probably both) the administrators of my PC & also my User ‘permissions’. This hasn’t solved the problem though and I am now getting the following different message in ‘Event Viewer’:
“The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user DESKTOP-KOE5E6R\Ray SID (S-1-5-21-2623428506-2736062558-1878657602-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.ShellExperienceHost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708). This security permission can be modified using the Component Services administrative tool”.
I then did some more research and, as a result, came to the conclusion that additional ‘permissions’ are required and attempted to use ‘Component Services’ for this (as I believe is necessary). Although I can access ‘Component Services’ OK, that where I’ve come to a halt because I’m unable to locate any item therein matching any of the ‘Event Viewer’ descriptions (and I’m by no means sure WHAT I’m looking for at this point!).
I have been tearing my hair out for the last couple of days so would be VERY grateful indeed if you could assist/give any advice!
Kind regards,
Ray
PS: There are numerous “repair” programs listed on the web, but I’m very cautious about either making the problem worse (at least my PC is still running!) or importing malware. Are you aware of any suitable/safe examples for this instance?Dear Kapil
^^ Ray, event 10016 error is harmless and occurs by design of the OS. You should not worry about it. The freezing on your system could be because of some another cause. Try to boot into Safe Mode and see if issue still occurs: https://www.kapilarya.com/how-to-boot-windows-10-into-safe-mode.
When I get to step 9, it’s already to set to Customize. Also, everything is greyed out. When I select Edit, I get a box saying: “One or more of the permission entries attached to the Registry Value has an unrecognised type and cannot be displayed.” I continue and SYSTEM is already there with Local Launch and Local Activation selected. Everything is greyed out. I still get the same warning in the Event Viewer but then I’ve only rebooted it once. In my case:
Registry:
CLSID = {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
AppID = {15C20B67-12E7-4BB6-92BB-7AFF07997402}
Component Services:
PerAppRuntimeBroker with AppID of {15C20B67-12E7-4BB6-92BB-7AFF07997402}
Thanks
Hi Kapil, I understand this could be a shot in the dark, but here goes…
I have a sapphire radeon vega 64 liquid cooled (www.sapphiretech.com/en/consumer/21275-00-radeon-rx-vega64-8g-hbm2-lc) vga card and of late (after updating the drivers) the pc freezes about once a day…. and I see that “Event 10016 Error” listed in the event viewer….
What should I do?
1) Roll back he driver to an earlier version? (current version 20.9.1)
2) Update the driver to a later version? (latest version 20.11.1
3) Or try the method above? (I’m worried about dcom security – not sure if i should worry ?)
^^ As said earlier, DCOM 10016 is harmless so you shouldn’t worry about it. As far as freezing is concerned, you can go ahead with points 1 and 2.
Whether it is harmless or not, I just didn’t want any “Error” event being logged. This article certainly helped me to get rid of DCOM Error event. Thank you.
^^ Glad to help JJM!
Hi Kapil, I’m trying to isolate why an app does not finish loading and reviewed the system log for the time I launch the app that hangs. This DCOM 10016 Warning appears and seems to be the only common thread. Might permissions be the the reason for the app to hang?
Thanks,
Steve
^^ It might be possible Steve!
Thanks so much for this Kapil Arya!
Also thank you Martyn for the additional and valuable clarification.
^^ Glad to help!
This doesn’t work if you have Windows Home 10. I can’t even express how upsetting that is.
^^ This solution is applicable to all Windows 10 editions!
Well I’m glad to know that one its harmless. I just starting getting them today, in a few hours I have 11k 10016 Warnings. I think it started after deleting two invisible, oddly named user accounts. No idea how they got there. I hate that a new one is generated every 30 seconds. But If you read down below, I have pasted Warnings Im suddenly getting now too, and I’m concerned what did I do? Any help would be much appreciated.
Danny
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 9/20/2021 2:48:55 PM
Event ID: 10016
Task Category: None
Level: Warning
Keywords: Classic
User: ASUSF17\Danny
Computer: AsusF17
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{37399C92-DC3F-4B55-AE5B-811EE82398AD}
and APPID
{37399C92-DC3F-4B55-AE5B-811EE82398AD}
to the user ASUSF17\Danny SID (S-1-5-21-429347077-1192707786-2631698525-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.GamingApp_2109.1001.8.0_x64__8wekyb3d8bbwe SID (S-1-15-2-1723189366-2159580849-2248400763-1481059666-1951766778-2756563051-3565589001). This security permission can be modified using the Component Services administrative tool.
Event Xml:
10016
0
3
0
0
0x8080000000000000
14665
System
AsusF17
application-specific
Local
Activation
{37399C92-DC3F-4B55-AE5B-811EE82398AD}
{37399C92-DC3F-4B55-AE5B-811EE82398AD}
ASUSF17
Danny
S-1-5-21-429347077-1192707786-2631698525-1001
LocalHost (Using LRPC)
Microsoft.GamingApp_2109.1001.8.0_x64__8wekyb3d8bbwe
S-1-15-2-1723189366-2159580849-2248400763-1481059666-1951766778-2756563051-3565589001
4 Criticals, 3 due to sudden shutdowns and 1 is:
Critical 9/14/2021 4:46:19 PM Kernel-Power 41 (63)
Of most concern I have a new Warnings tonight:
Log Name: Microsoft-Windows-Dhcp-Client/Admin
Source: Microsoft-Windows-Dhcp-Client
Date: 9/20/2021 11:20:59 PM
Event ID: 1001
Task Category: Address Configuration State Event
Level: Error
Keywords: (1)
User: LOCAL SERVICE
Computer: AsusF17
Description:
Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0xEC2E9814DA83. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
Event Xml:
1001
0
2
3
75
0x4000000000000001
422
Microsoft-Windows-Dhcp-Client/Admin
AsusF17
6
EC2E9814DA83
121
One of these:
Log Name: System
Source: Schannel
Date: 9/20/2021 5:30:01 AM
Event ID: 36871
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: AsusF17
Description:
A fatal error occurred while creating a TLS client credential. The internal error state is 10013.
Event Xml:
36871
0
2
0
0
0x8000000000000000
12985
System
AsusF17
client
10013
And a dozen or so ‘disk’ Source warnings that I’m very concerned about:
Log Name: System
Source: disk
Date: 9/21/2021 12:56:26 AM
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: AsusF17
Description:
The driver detected a controller error on \Device\Harddisk6\DR6.
Event Xml:
11
0
2
0
0
0x80000000000000
17226
System
AsusF17
\Device\Harddisk6\DR6
0F00800001000000000000000B0004C0030100000000000000000000160000000000000000000000274AB70000000000FFFFFFFF06000000580000050000000000000612280108000000000073000000000000000000000080FCCC038684FFFF0000000000000000F00788008684FFFF000000000000000000000000000000001B000000010000000000000000000000000000000000000000000000000000000000000000000000
Dear Kapil Arya,
I have problem and hard to solve,
My problem is user suddenly disappear in access folder,
do you have clue to find the root cause ?
this user is AD user
My workaround solution check user access in folder by powershell script, if user gone and then script will add it
appreciate if you give clue to find the system that remove user from folder access
regards
Yudhya
Shout out to Kapil and Funksoulbrother. I might be good to go now!
^^ Glad to help David!
I cannot find {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
I can find the CLSID in the registry, no problem… it’s the Components Snap-In that doesn’t seem to contain the AppID – I suspected as such, particularly since the AppID for the CLSID I looked up in the registry (and is filling my Event Log with ‘Warning’ messages) is the same as the CLSID.
This threw me for a loop… especially after being unable to locate it in the Components SnapIn. Ugh…
^^ Well, DCOM 10016 is harmless so if you like, you can skip it, if you can’t follow above steps.
DCOM 10016 is affecting my computer it turns off every time apparently DCOM is the 10016. I did every step yet I can’t find CLSID and APPID in the component services. I watch all the youtube videos.
Any reason you don’t set the AppID and CLSID back to owner NT Service\TrustedInstaller and remove full permissions from SYSTEM and Administrators when done?
Since it’s a harmless error and supposedly supposedly functioning as intended, wouldn’t it be better to let it be and not allow activating? And instead, just turn off logging of that event or are there security concerns for simply disabling logging of that event?
^^ AFAIK, turning off logging specifically not possible.
So many steps, yet completely useless. Fooled me though. Looked legit.
I can do steps 1-4, and change ownership. However, when I try step 5, I too get “access denied”. And yes, I tried it again. So no success for me.
Interesting the number of times it’s stated as being “completely harmless” – yet it’s clearly related to issues I’m having.
I have a Win10 server running a few Java progs all the time. They are started from the Task Scheduler (and restarted every day at 2am, just to ensure they are running.)
Not infrequently I find (from the logs) that they have suddenly stopped working – and remain so until the following day at 2am. *Always* when there’s been such a freeze, I check in the event viewer and find the error 10016 at the time of the last log write.
Now, you could argue over cause and effect – but I never used to get this when running on a desktop Win7 system…
5. After taking ownership, you’ll be back to Permissions sheet shown below where you’ve to select your account and then SYSTEM under Group or user names section and then check the Allow box against Full Control. By doing this, you’re providing full control to yourself and SYSTEM to manage the registry key and its activities. Click Apply followed by OK.
this step is impossible for me, when I check FULL CONTROL and click OK its showing me Access Denied, cant save changes APID code….
I think it works for me. I change in registry Owner from “TrustedInstaller” to “Administrators”.
And in Component Services > DCOM Config choose the problem one AppID in properties > security > edit > add SYSTEM with Local Activation on.
Thank You, Kapil Arya!
Keep this post alive. It’s very helpful.
Again error! Not solved at all.
HKEY_CLASSES_ROOT\CLSID\{8D8F4F83-3594-4F07-8369-FC3C3CAE4919} Doesn’t show up for me when I put it in my Registry Editor