We are seeing this error:
Log Name: Application
Source: Microsoft-Windows-COMRuntime
Date: 07/12/2021 17:44:39
Event ID: 10031
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DC1.domain.local
Description:
An unmarshaling policy check was performed when unmarshaling a custom marshaled object and the class {CDC82860-468D-4D4E-B7E7-C298FF23AB2C} was rejected
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-COMRuntime" Guid="{xxxxxxxxxxxxxxxxxxxx}" EventSourceName="COM" />
<EventID Qualifiers="0">10031</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2021-12-07T17:44:39.580425400Z" />
<EventRecordID>458666</EventRecordID>
<Correlation />
<Execution ProcessID="1252" ThreadID="6904" />
<Channel>Application</Channel>
<Computer>DC1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>{CDC82860-468D-4D4E-B7E7-C298FF23AB2C}</Data>
</EventData>
</Event>
The CDC82860-468D-4D4E-B7E7-C298FF23AB2C ID in the registry is found to be InProcServer32
The error appears to occur at login.
The user has a group policy enforced roaming profile and is an admin for this server.
Presumably it is a 32 bit COM app that is causing this, but how do I find out which one?
Edited by moderator
11 months ago
|
Reason: Not specified
