SharePoint 2010: Local Activation Permission – DistributedCOM Error


I am performing routine checks of the SharePoint 2010 server logs, and see many of these event ID 10016 DistributedCOM error messages in the Windows System log and wonder what could be causing them. Checking the Application log and I also see MsiInstaller warning messages at around the same time related to SharePoint 2010.

The error message for event ID 10016:

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {000C101C-0000-0000-C000-000000000046} to the user domain\sp-farm-account SID (guid) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

Here’s a screen grab of the error from the System log:

distributedCOM-system-error-1

After a bit of research online, it turns out that the SharePoint 2010 Product Version Job runs at 12.45am every day. And at precisely that time every day, there were MsiInstaller warnings in the Application log and errors in the System log (event ID 10016).

So from what I have read online, here are the steps to resolve the event 10016 error that relates to distributedCOM:

  1. On the server where the above error occur, click Start > Run > type regedit to acess the registry
  2. Copy the GUID from System log General tab, i.e. 000C101C-0000-0000-C000-000000000046
  3. In the registry editor, click to select the top most branch of the registry – Computer
  4. From the menu, Edit > Find, paste in the GUID. It’ll stop at the application entry, i.e. AppID sub-branch. Note the application name on the right side pane.
  5. Start > Administrative Tools > Component Services
  6. Expand Component Services, Computers, My Computer, DCOM Config. Scroll down and find the application ( sometimes it is displayed simply as a CLSID)
  7. Right-click on the application (or CLSID 000C101C-0000-0000-C000-000000000046) noted in the previous step, select Properties and select the Security tab
  8. Ensure that the Customize radio button is selected, then click Edit in the Launch and Activation Permissions* section
  9. Add the SharePoint farm account specified in the System log error message, giving it Local Launch and Local Activation permssion (and in some requirements – remote launch / activate permission). Click OK, then OK again.
  10. Restart IIS

* If the radio buttons are greyed out in the Launch and Activation Permissions section of the Security tab, then you need to change the ownership of this registry key by following these steps:

  1. Return to the registry windows you open previously (or repeat steps 1 to 4 above)
  2. Right click on the GUID for the found application that was having issue and select Properties
  3. Click Advanced, and then the Owner tab
  4. Change the owner to local Administrators group. Click OK.
  5. Click on the local Administrators group and grant it Full Control permissions. Do not change the permissions for the TrustedInstaller.
  6. Close Component Services window and re-open it

Now return to step 8 above to grant the Launch and Activation Permissions.

Reference and full credits to:

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s