Lemonde
  • Lemonde
  • 100% (Exalted)
  • Advanced Member Topic Starter
2 years ago
I am seeing this on my Windows 11 Enterprise Box

New install of Windows 11

Office 2019

What are these two processes that I need to grant permission for straight out of the box?

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 04/09/2021 16:45:42
Event ID: 10016
Task Category: None
Level: Warning
Keywords: Classic
User: LOCAL SERVICE
Computer: PC.domain.local
Description:
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{22279AF5-03AE-4CAF-989D-2530918B2F1C}
and APPID
{0773CCD6-59A2-4D26-B235-19247767E645}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:



10016
0
3
0
0
0x8080000000000000

11830


System
PC.domain.local



application-specific
Local
Launch
{22279AF5-03AE-4CAF-989D-2530918B2F1C}
{0773CCD6-59A2-4D26-B235-19247767E645}
NT AUTHORITY
LOCAL SERVICE
S-1-5-19
LocalHost (Using LRPC)
Unavailable
Unavailable


Sponsor

Want to thank us? Use: Patreon or PayPal or Bitcoins: bc1q4whppe29dw77rm4kv4pln0gqae4yjnxly0dny0hky6yhnafukzjsyrsqhk

All opinions expressed within these pages are sent in by members of the public or by our staff in their spare time, and as such do not represent any opinion held by sircles.net Ltd or their partners.


sirclesadmin
2 years ago
The best way to find the service that is causing the problem is top search for the string in RegEdit.exe by running regedit from the run command available from [Windows Button] + R

Once you have found the service you can adjust the permissions on component manager, which you should run as an administrator user.

In this case the services are both the same - DTSAudioService

So go to components services, run as administrator and find DTSAudioService:

UserPostedImage

Now right click and choose permissions and select the security tab at the top:

UserPostedImage

Now click the edit button under configuration permissions and you should see:

UserPostedImage

Click the add button and enter 'local' as the user, as that is the user that the event log is reporting as lacking permissions. Tick the boxes to ensure that the LOCAL SERVICE user has full control as above.

Now press OK to return top the previous screen and this time click the top edit button under Launch and Activate Permissions

UserPostedImage

Now ensure that the LOCAL SERVICE user has permissions to launch and activate in all cases by populating all of the options in the box below when LOCAL SERVICE is highlighted in the top box:

UserPostedImage

That should give the LOCAL SERVICE user permissions to run the DTSAudioService whenever it wishes.