| Posted by: andrewt2m - 08 December 2021 11:07:37 |
|---|
| We are seeing this error: Log Name: Application Source: Microsoft-Windows-COMRuntime Date: 07/12/2021 17:44:39 Event ID: 10031 Task Category: None Level: Error Keywords: Classic User: N/A Computer: DC1.domain.local Description: An unmarshaling policy check was performed when unmarshaling a custom marshaled object and the class {CDC82860-468D-4D4E-B7E7-C298FF23AB2C} was rejected Event Xml: [code=markup]<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-COMRuntime" Guid="{xxxxxxxxxxxxxxxxxxxx}" EventSourceName="COM" /> <EventID Qualifiers="0">10031</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2021-12-07T17:44:39.580425400Z" /> <EventRecordID>458666</EventRecordID> <Correlation /> <Execution ProcessID="1252" ThreadID="6904" /> <Channel>Application</Channel> <Computer>DC1.domain.local</Computer> <Security /> </System> <EventData> <Data>{CDC82860-468D-4D4E-B7E7-C298FF23AB2C}</Data> </EventData> </Event>[/code] The CDC82860-468D-4D4E-B7E7-C298FF23AB2C ID in the registry is found to be InProcServer32 The error appears to occur at login. The user has a group policy enforced roaming profile and is an admin for this server. Presumably it is a 32 bit COM app that is causing this, but how do I find out which one? |
| Posted by: Lemonde - 16 June 2022 22:52:04 |
|---|
| Search the registry for CDC82860-468D-4D4E-B7E7-C298FF23AB2C and you will find out what the service is. Then you can add permissions in Component Services |