Event ID 10016 — Insufficient DCOM authorisation

A COM/DCOM application tried a « Dialogy » without having exactly the required authorisations.

Source of event

Microsoft-Windows-Dis-Programming — category Application….

Possible causes

• Current Windows Behaviour
• Applicative component
• Personalized DCOM Permissions

Verifications to be carried out

1. Identify CLSID and APPID
2. Check if a real malfunction is associated
3. Avoid changing permissions only to delete the event

Useful orders….

Get-WinEvent -FilterHashtable @{LogName='System'; Id=10016} -MaxEvents 30

To be retained….

An Event ID must always be interpreted with its source, its full message, its timing and the context of the system. The same number may exist in several providers of events.