en[EVENT10016] DCOM Error: RuntimeBroker {9CA88EE3-...}

このサイトを検索 | Search this site
,Japan

This document describes [Event ID 10016, Source: DistributedCOM (DCOM)] that is recorded when updated to Windows 10 v1803.

According to me,

It was a log informing that the account logged in to Windows could not access RuntimeBroker (DCOM component).

Well, the main subject.

This article

This article will describe the procedure to repair Runtime Broker error.

Two types of management tools for Windows 10 are used for repair.
  1. Registry editor
  2. Component service

The procedure to describe is complicated.

And there is a risk that Windows will not start if you operate Registry Editor incorrectly, so there is no need to force repair.

Regarding DCOM errors, Microsoft officially recommends through.


Event Log

The event log is reprinted.

Event Log
messageApplication-specific permission settings include local activation permissions for COM server applications with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}, and application container usage. Cannot be given to user Conputer\Login User SID (S-1-5-21-xxxxxxxxxx-xxxxxxxxx-xxxxxxxxx-xxxx) at address LocalHost (using LRPC) running with no SID (not available). This security permission can be modified using the Component Services administration tool.
The name of the logsystem
SourceDistributedCOM (DCOM)
Event id10016
levelerror
userLogin User
APPID{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
APPID nameRuntimeBroker

Repair procedure

Use the Registry Editor and Component Services that come with Windows 10.

This procedure assumes that you are logged in to Windows with an account that belongs to Administrators.
    (Registry Editor)
  1. Change APPID owner
  2. Add Administrators to group or user names
  3. Set Administrators to full control
    (Component service)
  1. Start Component Services
  2. Add Users to Launch and Activation Permissions
    (Registry Editor)
  1. Restore owner
  2. End of procedure

1. Procedure to change the owner of APPID

Registry operations are at your own risk
Before working with Registry Editor
Make a backup copy of your registry in case something goes wrong.
1.1 Start Registry Editor
Run (Win + R), enter regedit as the name, and click OK to start the registry editor.

1.2 Search APPID
Launch the search dialog (Ctrl + F /Edit> Find),
Search for APPID.

Search value{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
result\HKEY_CLASSES_ROOT\AppID\{9CA88EE3-ACB7-47c8-AFC4-AB702511C276}
1.3  Change Owner from TrustedInstaller to Administrators
Right-click {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} and select "Permissions".

event-right-click

Click "Detailed Settings" at the bottom right.

Advanced Setting

The owner in the upper left of the transition screen is TrustedInstaller, so click Change.

Owner: TrustedInstaller

Click Advanced on the Select Users or Groups screen.

Select user or group> Advanced settings

Click Search and Administrators will be listed in the search results. Select it and then select OK.

There are Administrator and Administrators , so let's select the one with s at the end.

Advanced settings> Search

Click [OK] after confirming that [PC name\Administrators] has been added to [Enter the objects to select], and click OK on the transition screen.

Add> Administrators

2. Add Administrators to the group or user name

Don't get confused because it's similar to the previous steps.

In this step, add Administrators as a group that can access {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} and give full control permissions.
  1. Click "Add" on the Security tab
  2. Click "Detailed settings" on the transition screen
  3. Click "Search" on the transition screen
  4. Click "Administrators" from the search result list on the transition screen to select it.
  5. Click “OK”
  6. Verify that Administrators was added to the group or user name

Group name or user name

3. Set to full control

  1. Select Administrators from group name or user name
  2. Full control of permissions ☑ Check permission
  3. Click OK

Administrators: Full control

4. Start Component Services

W10> Start Menu> Windows Management Tool> Component Services

Launch Run, enter dcomcnfg as the name and click OK .

5. Add Users to Launch and Activation Permissions

5.1 Find Application ID

The APPID can be found visually in the "Application ID" column displayed in the right pane when you select the DCOM configuration. There is no search function.

Console root
∨ Component service
 ∨ Computer
  ∨ My computer
   > DCOM configuration

Look for {9CA88EE3-ACB7-47c8-AFC4-AB702511C276} in the Application ID column.

The name is Runtime Broker.
There are two Runtime Brokers, so be careful not to make a mistake.

Application ID and name
APPID nameAPPID
RuntimeBroker{9CA88EE3-ACB7-47c8-AFC4-AB702511C276}
RuntimeBroker

5.2 Add Users to RuntimeBroker {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

5.2.1
RuntimeBroker {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} > Right click > Property

RuntimeBroker: Property
5.2.2
Security tab> Launch and Activation Permissions> Edit


Select Remove if Windows Security appears.
Windows security

One or more of the permission entries attached to the registry value cannot be viewed because it is an unrecognized type or application-specific (callback) type.

-Click Delete to remove unrecognized and callback permission entries. Note that inherited permission entries will not be deleted. The reason is that you can only delete it at the level of the corresponding parent, or you can break inheritance on this object.

-Click Cancel to view only the recognized permission entries as read-only without changing the permissions.

5.2.3
Add > Detailed settings > Search

Click Add> Advanced and click Search from the dialog that appears. Select "Users" from the search result list and click "OK".

Search result> OK
5.2.4
Select users or groups

Confirm that Users is added under "Enter the object name to select" and click OK.

Select users or groups
5.2.5
Launch and activation permissions

With Users selected, check ☑Activate from local under "Permissions" and click OK. Click on OK (or OK after applying) as it transits to the property screen of RuntimeBroker.

Users

6. Restore owner

The owner of the modified registry key should be restored when the component services are done.

Original value TrustedInstaller is entered directly.

Input valueNT SERVICE\TrustedInstaller
Trustedinstaller

7. End of procedure

Restart your PC and check the Event Viewer.

It is successful when the event log is not recorded.

Summary

You cannot change the settings unless you change the owner of the Runtime Broker. And when you're done, don't forget to perform the process of returning the owner.

[procedure]
  1. Change Owner to TrustedInstaller → Administrators
  2. Change Runtime Broker settings
  3. Change the owner to Administrators → TrustedInstaller (Undo)

User type

The users logged in the DCOM error include:
  • LOCAL SERVICE
  • NETWORK SERVICE
  • Login Account (This article)
  • ... etc

Since the user this time is [Login user (user logged in to Windows)], I added my account to RuntimeBroker and performed the procedure in [5.2.5], but it had no effect.

...

When I searched the net, I got multiple hits for adding [INTERACTIVE], but it didn't work in my environment.

There are two types of RuntimeBroker, so be careful not to mistake the APPID to be repaired.

Cause of the error

We have confirmed that this error is recorded when Google Chrome is started, so it may be repaired naturally in a future Chrome version upgrade.

Verification: Windows 10 Pro Fall Creators Update, 1709
Windows 10 Pro April 2018 Update, 1803
SC2
ブログサークルSNS
クリックして応援してね!
人気ブログランキングPVアクセスランキング にほんブログ村ブログランキング・にほんブログ村へ

このサイトを検索 | Search this site

コメントを投稿

0 コメント