Event 10016: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1}

 

On Windows 7, you may have the following error stated in your eventlog:

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Event ID: 10016
Level: Error
User: SYSTEM
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID{C97FCC79-E628-407D-AE68-A06AD6D8B4D1} and APPID {344ED43D-D086-4961-86A6-1106F4ACAD9B} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

The descriptions instructs you to modify the security permissions in the Component Services MMC. However, you’ll soon find out that the given ID’s are not listed in the Component Services. Because the procedure to prevent the error from occurring is quite devious, I will describe them here, from begin to end:

  1. Make sure you’re logged on as an administrator.
  2. Click Start, type regedit in the Search bar, then click regedit.exe
  3. In the Registry Editor, press CTRL-F, type {344ED43D-D086-4961-86A6-1106F4ACAD9B} and click “Find Next”.
  4. The first result is located in HKEY_CLASSES_ROOT\AppID\. This is the key we need.
    image
  5. Right-click the key {344ED43D-D086-4961-86A6-1106F4ACAD9B} in the left sidebar, and then press “Permissions…”
  6. We first have to change the ownership of the key. The current owner is TrustedInstaller. We have to change the owner to Administrators. Therefor, click Advanced. Then go to the tab Owner, select Administrators, check the box “Replace owner on subcontainers and objects”  and press OK.
    image
  7. Now that we have changed the ownership to ourself (member of the Administrators group), we can change the permissions on the registry key. In the Permissions window, grant Administrators AND SYSTEM Full Control permissions
    image 
    Then click OK to confirm the changes. In these 8 steps, we have granted the Administrators and SYSTEM account full permissions to the key HKEY_CLASSES_ROOT\AppID\{344ED43D-D086-4961-86A6-1106F4ACAD9B}
  8. Verify that in this key, the value of LocalService is IPBusEnum
  9. Click Start, type Component in the Search box, and then click Component Services
  10. In the Component Services window, go to Computers –> My Computer –> DCOM Config. Right-clickIPBusEnum and click Properties.
  11. Go to the tab Security. In the Launch and Activate permissions section, select Customize and click Edit.
  12. Select SYSTEM, select the permissions checkbox “Local Launch”. Then click OK to apply the change.
    image
  13. Done!