Fix: EventID 10016 (The Application-Specific Permission Settings Do Not Grant Local Activation Permission)

If you don’t get that, when you click on “Edit” are you able to proceed with the rest of the steps?

thanks for this

I get an error adding the NT AUTHORITYLOCAL SERVICE says its not valid

The following object is not from a domain listed in the Select Location dialog box, and is therefore not valid:
NT AUTHORITYLOCAL SERVICE
any suggestions? please
cheers
Karen

Have you been able to fix this issue?

this makes no sense so what do i type into the small box where it says Value data?

I had the same problem. I just changed in step 11 from username to “Administrator” and it worked.

What version of Windows are you on?
Seems to me that you didn’t grant the permissions correctly as indicated in the first couple of steps. Try repeating them carefully and then check if the issue is fixed.

If you’re on Windows 10 there is no “NT AUTHORITYLOCAL SERVICE” it’s just LOCAL SERVICE. This worked. Thank you. After the version 2004 updates I got a ton of these. I’m just going to have to rinse and repeat. I know people say you can ignore warnings, but dang if fixing didn’t solve some audio problems I was having and the app I was using didn’t lock up.

HI.
I cannot modify nothing on runtimebroker.
What can i do?

Thank you very much for this solution posted. I followed the steps stated but when I give permission and click apply, it says “Access Denied”. How can I solve this?

Thanks Dude, it work for me. You saved my time, which I searched for solutions for 48 hours.

I cant get past the runtime broker. The options to edit are disabled. I also get a prompt warning.

Hey Zubyan – any other advice on this error? I’m getting the access denied as well at this step, but running as admin did resolve the error.

In step 20 you say there are two instances of RunTimeBroker and I only have one.
And the AppID is not the same as the error.
I’ve already made all the other changes

This.
Granting privileges to unknown processes is just bad.
I read this warning as “unauthorized process trying to do stuff”.
My first inclination is to track down such requests and prevent them *unless* I can identify the request as coming from a trusted source *and* I have some reason to want that source to do what it’s doing.
The “fix” I’d want is to identity the program, and then disable the request and see if it causes any problems.
Because of crashes, I’ve been trying to clear out my Event warnings and errors. Simplest response is to delete the program if I don’t see the need for it.

Sheesh. Msoft’s response on this is to ignore the warning, or filter it out from your event view if it bothers you.
Crazy old me, I’d think that the fix would be for Msoft to stop sending warnings on things that they’ve determined are not problems.
https://docs.microsoft.com/en-US/troubleshoot/windows-client/application-management/event-10016-logged-when-accessing-dcom

You will have to download a 3rd party tool in order to get the permissions then. It’s a small tool that basically allows you to open files with all permissions. Follow these steps:-

(Warning: With great power comes great responsibility, please don’t use this app to run any other program otherwise there will be some serious permissions issues or if the program is any sort of virus it can infect your computer with full permission. Also, setting up your registry incorrectly can cause instability in your computer. Please make a restore point before making any of these changes we won’t be responsible for any damage done to your computer.).

1. Download NSudo from this link: https://sudo.to/2mw
2. Once the NSudo is downloaded. Simply right-click on it and run it as administrator.
3. Now make sure the selected user is “TrustedInstaller” and the “Enable all privileges” option is checked.
4. Now type “Regedit” and press “Run”.
5. Once you have done that you should have the Regedit window opened with all the permissions.
6. Simply do all the steps provided in the article and your issue should be resolved.

Let me know how it goes for you so we can add this method to the article as well. Thank you!

Run the dcomcnfg.exe from an Administrator command or powershell prompt… That should do the trick.

I had the same issue, but was able to resolve by giving ownership of the RuntimeBroker to the Administrators group in the Registry Editor, similar to how the other APPID and CLSID were assigned to the user’s account in the steps of this article.

Thank you for presented proposed solution. Unfortunately does not work on Windows Server 2019. On Server when arriving in point to modify and setup local Activation it is all grey and unable to add new accounts or change everything.

You will have to download a 3rd party tool in order to get the permissions then. It’s a small tool that basically allows you to open files with all permissions. Follow these steps:-

(Warning: With great power comes great responsibility, please don’t use this app to run any other program otherwise there will be some serious permissions issues or if the program is any sort of virus it can infect your computer with full permission. Also, setting up your registry incorrectly can cause instability in your computer. Please make a restore point before making any of these changes we won’t be responsible for any damage done to your computer.).

1. Download NSudo from this link: https://sudo.to/2mw
2. Once the NSudo is downloaded. Simply right-click on it and run it as administrator.
3. Now make sure the selected user is “TrustedInstaller” and the “Enable all privileges” option is checked.
4. Now type “Regedit” and press “Run”.
5. Once you have done that you should have the Regedit window opened with all the permissions.
6. Simply do all the steps provided in the article and your issue should be resolved.

Let me know how it goes for you so we can add this method to the article as well. Thank you!

Try running dcomcnfg as administrator by searching it in windows and selecting from the right click menu instead of using the r shortcut.

Try the fixes suggested in this article:

https://appuals.com/how-to-fix-dcom-error-10016-on-windows-7-8-and-10/

“An object named “NT AUTHORITY/LOCAL SERVICE” cannot be found. Check the selected object types and location for accuracy and ensure that you typed the object name correctly, or remove this object from the selection.” I got this error.

Hey @jamesscottwilkerson:disqus — might be too late or you’ve already solved, but in my experience, seeing these greyed out means you might have missed a step on the registry key permissions portions of the steps above or perhaps aren’t launching Component Services as Administrator. Re-check Steps 6-14 on this page. Cheers!

Hi!

I followed all the tips in this thread to resolve a few issues with the System Log, but still i am getting errors!

Tried adding LOCAL SERVICE, USERS, Administrator and Administrators!
Even added my own user FUJITSUusername (that has Administrator privileges)

Any ideas??

Thanks!

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
and APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
to the user FUJITSUusername SID (S-1-5-21-3351063332-3780512080-3317346159-1002) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.ShellExperienceHost_10.0.18362.1533_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708). This security permission can be modified using the Component Services administrative tool.