en[EVENT10016] Windows.SecurityCenter.WscDataProtection

Atom | RSS

このサイトを検索 | Search this site

,Japan

en[EVENT10016] Windows.SecurityCenter.WscDataProtection

to japanese

With the update to Windows 10 v1809, three event logs that seem to be related to Windows Security Center are now recorded.

[CLSID]

1. Windows.SecurityCenter.WscBrokerManager
2. Windows.SecurityCenter.SecurityAppBroker
3. Windows.SecurityCenter.WscDataProtection

[Guid]

• {1b562e86-b7aa-4131-badc-b6f3a001407e}
  * A ~ C same Guid

The event log offers the following solutions:

"This security permission can be modified by using the Component Services administration tool."

Unfortunately,

Since "APPID: Unavailable", the APPID cannot be specified even if the component service is started.

Well, the main subject.

I don't know how to fix it at the time of writing, so the handling of this log is as follows.

[PLAN-A, B]

1. Ignore until repaired naturally (Microsoft recommended)
2. Stop recording event log

The Microsoft official recommends [Event ID 10016: DCOM error] to be ignored as it is the result of the Windows OS operating as specified.

If you select PLAN-A, this article ends here, so I will share the procedure for PLAN-B.

目次[表示]

• 1.Event Log
• 2.Steps to stop logging
• 3.Afterword

Event Log

The event log is reprinted.

In order to keep a record, we reprint three types of messages that differ only in CLSID.

Event Log

message	CLSID for application-specific permission settings Windows.SecurityCenter.WscBrokerManager And APPID unusable Local launch permissions for this COM server application to user NT AUTHORITY\SYSTEM SID (S-1-5-18) at address LocalHost (using LRPC) running at application container unavailable SID (not available) You can not. This security permission can be modified using the Component Services administration tool.
log name	system
Source	DistributedCOM
Event id	10016
level	error
user	SYSTEM
Opcode	information
Guid	{1b562e86-b7aa-4131-badc-b6f3a001407e}

Event Log

message	CLSID for application-specific permission settings Windows.SecurityCenter.SecurityAppBroker And APPID unusable Local launch permissions for this COM server application to user NT AUTHORITY\SYSTEM SID (S-1-5-18) at address LocalHost (using LRPC) running at application container unavailable SID (not available) You can not. This security permission can be modified using the Component Services administration tool.
log name	system
Source	DistributedCOM
Event id	10016
level	error
user	SYSTEM
Opcode	information
Guid	{1b562e86-b7aa-4131-badc-b6f3a001407e}

Event Log

message	CLSID for application-specific permission settings Windows.SecurityCenter.WscDataProtection And APPID unusable Local launch permissions for this COM server application to user NT AUTHORITY\SYSTEM SID (S-1-5-18) at address LocalHost (using LRPC) running at application container unavailable SID (not available) You can not. This security permission can be modified using the Component Services administration tool.
log name	system
Source	DistributedCOM
Event id	10016
level	error
user	SYSTEM
Opcode	information
Guid	{1b562e86-b7aa-4131-badc-b6f3a001407e}

Steps to stop logging

When I perform the steps described, logging stops, but it is an underlying error and is not a fundamental solution.

The advantage is that the event viewer is refreshing.

[procedure]

1. Start Registry Editor
2. Search for {1b562e86-b7aa-4131-badc-b6f3a001407e}
3. Change the value of Enabled from 1 to 0

Registry operations are at your own risk

Before working with Registry Editor
Make a backup copy of your registry in case something goes wrong.

1. Start Registry Editor

Windows key + R> Name: regedit

• How to start Registry Editor: Scrap 2nd.

2. Search for {1b562e86-b7aa-4131-badc-b6f3a001407e}

Hit in multiple places. The destinations are as follows.

\HKEY_LOCAL_MACHINE\SYSTEM\ControlSet\Control\WMI\Autologger\EventLog-System\{1b562e86-b7aa-4131-badc-b6f3a001407e}

3. Change the value of Enabled from 1 to 0

After changing to Enable: 0, restart the computer, wait a few seconds, and then start Event Viewer to check.

* Since the Security Center service is delayed, it is not possible to confirm the effect immediately after starting the PC.

Afterword

[Event ID 10016] is logged when a Windows component accesses a DCOM component without the required permissions.

And this behavior is according to the specifications. ('ω')

The result of the component operating according to the specifications of Windows is recorded as a 10016 event, so it should be left alone until it recovers naturally.

Since the error of Windows.SecurityCenter.WscBrokerManager that I wrote down in the past is not recorded when the COM + application error is repaired, this error may be solved by repairing another error.

2019/05/30

When you open the Windows Service Control Manager (commonly called service) and change the startup type of Security Center (wscsvc) from "Automatic (delayed start)" to "Automatic", the event ID that you wrote down this time is no longer recorded. It was

However, since the Security Center startup type is grayed out, special operations are required to change the operation.

Please read the related article for specific information.

Validation: Windows 10 Pro October 2018 Update, v1809

en-event の記事 (Articles about the en-event)

1. Windows 11 22H2 and the event log (tak)
2. en[EVENT131] Metadata staging failed
3. en[EVENT7009] Service Control Manager (SCM)
4. en[EVENT2484] Tile Database Corruption
5. en[Event ID 10016] How to fix PerAppRuntimeBroker error
6. en[Event3] Kernel-EventTracing Microsoft Security Client OOBE
7. en[EVENT2002] Eap method DLL path
8. en[EVENT333] ESENT error (taskhostw, WebCacheV01.dat)
9. en[EVENT10016] Windows.SecurityCenter.WscBrokerManager, APPID not available
10. en[EVENT34] Cancel power saving setting of power management of Bluetooth HID device
11. en-event ラベルの記事（要約付）
12. Japan が含まれる記事（要約付）

新着順 (New arrival order)

1. 【2024年度】藤井七冠(最優秀棋士)、羽生九段現役続行と会長退任を表明
2. 【バグ】TVerRec 3.4.2 のリネーム処理不具合とその原因を考察
3. 【恐怖】ポンジスキームとは？歴史から学ぶ詐欺の仕組み
4. 【終息】TVerRec 3.3.9（暫定）で機能制限ほぼ解除、3.4.0リリース！
5. 【緊急】TVerRec 3.3.6緊急リリース！仕様変更に暫定対応
6. 【未解決】TVerRecダウンロード不具合！TVerの仕様変更かも？
7. 【昇級／降級】全棋士ランキング確定、伊藤匠叡王B1へ昇級、羽生九段B2へ降級
8. 【将棋】なぜ藤井聡太は人々を魅了するのか？【2024年度振り返り】
9. 【更新】Lhaz 2.5.4リリース！法人利用が有料化へ
10. 【Pixel 3月／2025】カメラ、WebView 、Bluetooth、電話のバグ修正【Android 15】

タイトル：en[EVENT10016] Windows.SecurityCenter.WscDataProtection：SC2

このサイトを検索 | Search this site