Lemonde
  • Lemonde
  • Advanced Member Topic Starter
a year ago
I am seeing this on my Windows 11 Enterprise Box

New install of Windows 11

Office 2019

What are these two processes that I need to grant permission for straight out of the box?

Log Name: System

Source: Microsoft-Windows-DistributedCOM

Date: 04/09/2021 16:45:42

Event ID: 10016

Task Category: None

Level: Warning

Keywords: Classic

User: LOCAL SERVICE

Computer: PC.domain.local

Description:

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

{22279AF5-03AE-4CAF-989D-2530918B2F1C}

and APPID

{0773CCD6-59A2-4D26-B235-19247767E645}

to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Event Xml:

10016

0

3

0

0

0x8080000000000000

11830

System

PC.domain.local

application-specific

Local

Launch

{22279AF5-03AE-4CAF-989D-2530918B2F1C}

{0773CCD6-59A2-4D26-B235-19247767E645}

NT AUTHORITY

LOCAL SERVICE

S-1-5-19

LocalHost (Using LRPC)

Unavailable

Unavailable


Sponsor

Want to thank us? Use: Patreon or PayPal or Bitcoins: 12G4A52Znm5s35buKDEmKU2p2vQY69Nsyo

Protect your visitors with SSL, from $3.44

All opinions expressed within these pages are sent in by members of the public or by our staff in their spare time, and as such do not represent any opinion held by sircles.net Ltd or their partners.


sirclesadmin
11 months ago
The best way to find the service that is causing the problem is top search for the string in RegEdit.exe by running regedit from the run command available from [Windows Button] + R

Once you have found the service you can adjust the permissions on component manager, which you should run as an administrator user.

In this case the services are both the same - DTSAudioService

So go to components services, run as administrator and find DTSAudioService:

UserPostedImage

Now right click and choose permissions and select the security tab at the top:

UserPostedImage

Now click the edit button under configuration permissions and you should see:

UserPostedImage

Click the add button and enter 'local' as the user, as that is the user that the event log is reporting as lacking permissions. Tick the boxes to ensure that the LOCAL SERVICE user has full control as above.

Now press OK to return top the previous screen and this time click the top edit button under Launch and Activate Permissions

UserPostedImage

Now ensure that the LOCAL SERVICE user has permissions to launch and activate in all cases by populating all of the options in the box below when LOCAL SERVICE is highlighted in the top box:

UserPostedImage

That should give the LOCAL SERVICE user permissions to run the DTSAudioService whenever it wishes.