Event ID 10016 - DistributedCOM

[holdum323]

Hi. @jobeard It's time to give up on this old man. I really wanted this to work, and I know you have spent a lot of time with me. You are appreciated. I went into the registry; found that APPID, tried to change permission and was denied. It just isn't working out for me, and your working with a old man with half a brain. I'll not bother you any further. Here's what I get in the registry.

 

[DelJo63]

Same kind of issue - - TAKE OWNERSHIP of the entry

 

[holdum323]

I see no way to take OWNERSHIP? I can't add Full control to any of them.

 

[DelJo63]

It is possible;

• try right click on the Appid
• or login as the Admin

It is possible so look about...

 

[holdum323]

I give up! Thanks a ton @jobeard I'm just to damn stupid and I think my brain is fried!

 

[holdum323]

I am the administrator. I have bothered you enough. I have learned a lot, thanks for your patience. Time to give up on me friend!
I right clicked on the APPID and tried to change permissions (Access Denied)

 

[DelJo63]

One more lesson; having admin rights is not the same as being the Administrator:

The TRUE admin is:

• S-1-5-21-635012957-3435899091-545158274-500

to see all users: get a cmd prompt and enter

• wmic useraccount

 

[holdum323]

Hi friend. I'm way out of my league? Now what?

 

[DelJo63]

1) get cmd prompt
2) enter: net user administrator /active:yes
3) Switch Users and log in to the Administrator account....
4) once there, ADD A PASSWORD!!! (hint: adm-your normal pwd)

Now you can proceed wit the original task, TAKE OWNERSHIP of the registry key and set SYSTEM:<Full control>

 

[holdum323]

Hi Friend you have given me 150%. I done all that, and it's still a no go. Thanks a million friend. I have restored my PC with a back up image and I'm giving up on this issue. Going back to where I was before I started this nightmare. If you lived in Oklahoma, I'd buy you the biggest steak in Oklahoma. I'm burned out and I'm sure you are also.

 

[holdum323]

Hi @jobeard I never give up, but I'm sure you are tried of this also, and my old brain is tired and fried at the moment. I will live to fight this issue another day, but for now, I'm tired of it. You are much appreciated.

 

[holdum323]

Hi @jobeard I never give up. I think I got permission changed to Full Control. Will see what happens. Thanks again for all your help. Here's screen shot. See what you think! I just changed the APPID. Will do the other if I get the DCOM error again. Things went better after I got away from it for awhile.
PS I used this tool SetACL.exe

 

[DelJo63]

That all looks correct (y)

 

[holdum323]

Thanks @jobeard! We'll see if that fixes my errors. One I dotted all the I's a crossed the t's, I was able to change the permissions!
I learned a lot and that's a good thing.

 

[DelJo63]

I tend to learn best when solving a real problem rather than some paper exercise.

The teachers maxim is

Explain it to me and I will understand;

let me get my hands dirty and I will then Know​

 

[holdum323]

Hi @jobeard I just got another DCOM error so I changed permissions for CLSID for "Full Control". If this doesn't work, I'm done with this. I have given it my best shot. What do you think?

 

[DelJo63]

Back to some basics. There's COM & then there's DCOM.

COM:

COM is executed at a local level, at the client's machine. COM is a software architecture that allows applications and systems to be built from the components supplied by different software vendors. It is a set of binary and network standards that allows any software to communicate with each other regardless of the hardware, the operating system, and programming language used for development. COM is not a Programming language but a specification that defines how components can communicate with each other.
​

DCOM

(Distributed Component Object Model) runs at the server end, where you pass instructions to the DCOM object and get it executed over the network. DCOM however is an older technology and has been replaced by Web Services.
​

So the questions are:

1. where did this originate FROM
2. what is being attempted

and I have no idea to resolve either question.