Event ID 10016 — Insufficient DCOM authorisation

A COM/DCOM application tried a "Dialogy" without having exactly the required authorisations

TopicIT resources → About 1 min read

A COM/DCOM application tried a « Dialogy » without having exactly the required authorisations.

Source of event

Microsoft-Windows-Dis-Programming — category Application….

Possible causes

Current Windows Behaviour
Applicative component
Personalized DCOM Permissions

Verifications to be carried out

Identify CLSID and APPID
Check if a real malfunction is associated
Avoid changing permissions only to delete the event

Commands

Get-WinEvent -FilterHashtable @{LogName='System'; Id=10016} -MaxEvents 30

Key takeaways

An Event ID must always be interpreted with its source, its full message, its timing and the context of the system. The same number may exist in several providers of events.