Unable to Change Permissions of DCOM Objects

Question

_{Wednesday, June 28, 2017 12:52 AM}

I'm running Windows 10 Creators (Microsoft Windows [Version 10.0.15063]).  In Event Viewer I'm getting errors for two COM server applications (ShellServiceHost and Immersive Shell) not having enough activation permissions:

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

I've looked online and done the following steps, yet I still cannot edit the security tab of the DCOM object:

1. Found the component keys in regedit under HKLM\Software\Classes\CLSID and changed ownership to my own user account
2. Tried changing CLSID keys ownership to the default Administrator account
3. In on the CLSID keys, added "Full Control" permissions to my account, default admin account, TrustedInstaller, Local Service
4. Tried booting in Safe Mode to modify the permissions
5. Exported the registry keys, deleted the keys, re-imported the keys
6. From Safe Mode, ran "sfc /scannow /offbootdir=C:\ /offwindir=D:\windows"
7. From Safe Mode, ran "dism /Image:C:\windows /Cleanup-Image"
8. Disabled UAC
9. Ran all commands as an administrator

Yet, when I navigate to the component in "Component Services," the Component Service "Security" tab is still greyed out. 

Is there anything else I can to to alleviate these errors?

All replies (4)

_{Thursday, June 29, 2017 6:35 AM}

Hi ,

If the main issue is to the Event 10016 error, I found a similar case for your reference, we could refer to the following link to fix it.
Error - Event ID: 10016; DistributedCOM
https://answers.microsoft.com/en-us/windows/forum/windows8_1-performance/error-event-id-10016-distributedcom/130522d2-beac-4495-980a-65e1e3279901

Best regards

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, July 3, 2017 2:52 AM | 1 vote}

Thank you for the reply Rick_Li.  I have seen similar threads like this and have tried changing the permissions on the registry keys.  However, going to Component Services, finding the service, right-click, Permissions, Security Tab, the options are still greyed out.  I'm not sure how I can get those options available...

_{Monday, July 3, 2017 9:05 AM}

Did you use built-in Administrator account to operate?

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Thursday, July 6, 2017 8:10 AM | 2 votes}

Easiest way is to download ExecTI from WinAero

http://winaero.com/comment.php?comment.news.1843

I use this to run mmc /e and add DCOM which gives you the needed permission.

It worth a try.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].