andrewt2m
  • andrewt2m
  • 100% (Exalted)
  • Advanced Member Topic Starter
a year ago
How can I find the application for this?

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 06/09/2023 12:16:56
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: domain\%USERNAME%
Computer: RDServer.domain.local
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
and APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
to the user domain\%USERNAME% SID (S-1-5-21-660087094-415256763-4027578020-1273) from address LocalHost (Using LRPC) running in the application container Unavailable SID (S-1-15-2-2034283098-2252572593-1075675386-2659511007-3245387615-27016815-3920691934). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10016</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2023-09-06T11:16:56.875136300Z" />
    <EventRecordID>373972</EventRecordID>
    <Correlation />
    <Execution ProcessID="1500" ThreadID="44444" />
    <Channel>System</Channel>
    <Computer>RDServer.domain.local</Computer>
    <Security UserID="S-1-5-21-660054694-4152133463-4027578020-1273" />
  </System>
  <EventData>
    <Data Name="param1">application-specific</Data>
    <Data Name="param2">Local</Data>
    <Data Name="param3">Activation</Data>
    <Data Name="param4">{8BC3F05E-D86B-11D0-A075-00C04FB68820}</Data>
    <Data Name="param5">{8BC3F05E-D86B-11D0-A075-00C04FB68820}</Data>
    <Data Name="param6">domain</Data>
    <Data Name="param7">%USERNAME%</Data>
    <Data Name="param8">S-1-5-21-660087094-4152133463-4027578020-1273</Data>
    <Data Name="param9">LocalHost (Using LRPC)</Data>
    <Data Name="param10">Unavailable</Data>
    <Data Name="param11">S-1-15-2-2034283098-2252572593-1072577386-2659511007-3245387615-27016815-3920691934</Data>
  </EventData>
</Event>
Sponsor

Want to thank us? Use: Patreon or PayPal or Bitcoins: bc1q4whppe29dw77rm4kv4pln0gqae4yjnxly0dny0hky6yhnafukzjsyrsqhk

All opinions expressed within these pages are sent in by members of the public or by our staff in their spare time, and as such do not represent any opinion held by sircles.net Ltd or their partners.


andrewt2m
  • andrewt2m
  • 100% (Exalted)
  • Advanced Member Topic Starter
a year ago
OK so the app appears to be 'Adobe Acrobat Reader Protected Mode' but was actually this:

 image.png You have insufficient rights to see the content.

What should the permissions really be to avoid these messages?