Windows 10: DistributedCOM 10016 error and {1B562E86-B7AA-4131-BADC-B6F3A001407E} permission error

I just formatted the computer. But I solved one error and still I get the same DistributedCOM 10016 error. And the error in the event viewer is as follows: application specific permission settings For COM Server application with CLSID Windows.SecurityCenter.WscDataProtection and APPID None , it does not grant Run Local permission to NT AUTHORITY\SYSTEM user with SID value S-1-5-18 at address LocalHost Using LRPC running in application container None SID None. This security permission can be changed using Component Services administrative tool. But what I don't understand is that this

:)

 

Microsoft-Windows-DistributedCOM {1B562E86-B7AA-4131-BADC-B6F3A001407E} System critical Error: shutdodwn - EventID 10016

This happened today and caused the system to freeze and shut down. I then tried to fix it authorizing administrator by regedit of:

Computer\HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WMI\Autologger\EventLog-System\{1b562e86-b7aa-4131-badc-b6f3a001407e}


Didn’t work as intended; any help? Should I give complete control to users too?

- System

- Provider

[ Name] Microsoft-Windows-DistributedCOM

[ Guid] {1B562E86-B7AA-4131-BADC-B6F3A001407E}

[ EventSourceName] DCOM

- EventID 10016

[ Qualifiers] 0

Version 0

Level 2

Task 0

Opcode 0

Keywords 0x8080000000000000

- TimeCreated

[ SystemTime] 2018-10-25 T 19:05:48.001952500Z

EventRecordID 2018

Correlation

- Execution

[ ProcessID] 360

[ ThreadID] 468

Channel System

Computer DESKTOP-LUCA

- Security

[ UserID] S-1-5-18

- EventData

param1 impostazioni specifiche dell'applicazione

param2 Locale

param3 Avvio

param4 Windows.SecurityCenter.WscDataProtection

param5 NA

param6 NT AUTHORITY

param7 SYSTEM

param8 S-1-5-18

param9 LocalHost (tramite LRPC)

param10 NA

param11 NA

_______________________________________________________________________________

 

DistributedCOM Error.

Yes, thank you for pointing me in a direction I can possibly pursue to correct the problem. I have manually fixed 10016 errors before by granting permissions and altering the registry.

This one has me stumped though because the APPID and SID are unavailable and usually there are two sets of Guid's to work with in order to fix the problem manually.

Since only one is given:

{1B562E86-B7AA-4131-BADC-B6F3A001407E} it doesn't leave me room to grant permissions to anything; yet alone be found in the Component Services Console by another name in order to grant access to Local or any other accounts.

This one is truly going to take some time to sort out, and I'll keep looking.

 

Event ID 10016, DistributedCOM Windows.SecurityCenter.WscBrokerManager

Thank you for your suggestions EdTittel and EyeInTheSky, and also Brink for the code box stuff.

Since then I disabled the log so to ignore it for now.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System\{1b562e86-b7aa-4131-badc-b6f3a001407e} changed the Enabled value data to 0.

I still don't know what it is so I'll continue looking for explanation and solution.

Regards,