We are seeing this error:
Log Name: Application
Source: Microsoft-Windows-COMRuntime
Date: 07/12/2021 17:44:39
Event ID: 10031
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DC1.domain.local
Description:
An unmarshaling policy check was performed when unmarshaling a custom marshaled object and the class {CDC82860-468D-4D4E-B7E7-C298FF23AB2C} was rejected
Event Xml:
10031
0
2
0
0
0x8080000000000000
458666
Application
DC1.domain.local
{CDC82860-468D-4D4E-B7E7-C298FF23AB2C}
The CDC82860-468D-4D4E-B7E7-C298FF23AB2C ID in the registry is found to be InProcServer32
The error appears to occur at login.
The user has a group policy enforced roaming profile and is an admin for this server.
Presumably it is a 32 bit COM app that is causing this, but how do I find out which one?