Fix Event 10016 on {C2F03A33-21F5-47FA-B4BB-156362A2F239}

In an attempt to clear my event log, I came across error event 10016 for {C2F03A33-21F5-47FA-B4BB-156362A2F239}:

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 and APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 to the user NT AUTHORITY \ LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool

Normally I ignore error 10016 in my event viewer. But there were so many of them this time that I decided to correct the error messages anyway.
In this post, I explain how you can solve this problem. I attempt to describe this as easily as possible. All instructions are straightforward. Sometimes with a screenshot to clarify.

Introduction to resolve event 10016

In this guide, the only requirement is an Administrator account.
This is the high-level planning:

• Take ownership on the CLSID in the Registry Editor
• Set permissions on the CLSID in the Registry Editor
• Take ownership on the APPID in the Registry Editor
• Set permissions on the APPID in the Registry Editor
• Putting Launch and Activation Permissions into Component Services administrative tool (DCOM)

No worries if this is unclear. Follow the steps below and you’ll be fine 🙂

Step 1

Make sure you are logged in as an Administrator. To check if your account has Administrator rights,

1. Press Start (Windows logo) ->
2. Select your Account photo ->
3. Select Change account settings.
4. You will see Administrator under your name.

Step 2

Open the Event Viewer. Note the following things:

• Permissions: Local Activation
• CLSID: {C2F03A33-21F5-47FA-B4BB-156362A2F239}
• APPID: {316CDED5-E4AE-4B15-9113-7055D84DCC97}
• User: NT Authority \ Local Service

  

Are these the same for you? Fantastic! Just follow my steps!
Do you have other values? Then write them down and replace them in the steps below!

Step 3

Open your Registry Editor as an Administrator. To do so:

1. Click Start (Windows logo)
2. Type regedit
3. Right-click Regedit
4. Click Run as administrator
   

Step 4

In the Registry Editor, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C2F03A33-21F5-47FA-B4BB-156362A2F239}

Did you notice another CLSID in step 2? Then replace {…} with your CLSID!
To make sure that you are in the right key in the Registry Editor, you can also compare the APPID. Like in this screenshot:

Also immediately write down the Application Name. In my case, that is Immersive Shell. You will need this Application Name in step 9. Do you have another application name printed? Record this.

Step 5

In the Registry Editor:

1. Right-click {C2F03A33-21F5-47FA-B4BB-156362A2F239}
2. Select Permissions

   

Step 6

In the window Permissions for {C2F03A33-21F5-47FA-B4BB-156362A2F239} :

1. Click Administrators once (so that it is selected)
2. Check the box Full Control – Allow
3. Click Advanced

In the Advanced Security Settings window for {C2F03A33-21F5-47FA-B4BB-156362A2F239}

1. Click on Change
2. Type Administrators
3. Click OK
4. Click OK
5. Click OK

Well done! You have now set the rights to the CLSID correctly.
In the next step, we will do the same for APPID

Step 7

In the Registry Editor, navigate to HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ APPID \ {316CDED5-E4AE-4B15-9113-7055D84DCC97}.

1. Right-click {316CDED5-E4AE-4B15-9113-7055D84DCC97}
2. Select Permissions
   

In the window Permissions for {316CDED5-E4AE-4B15-9113-7055D84DCC97}

1. Click Administrators once (so that it is selected)
2. Check the box Full Control – Allow
3. Click on Advanced

In the Advanced Security Settings window for {316CDED5-E4AE-4B15-9113-7055D84DCC97}

1. Click Change
2. Type Administrators
3. Click OK
4. Click OK
5. Click OK

You have now also set the rights to the APPID correctly
In the following steps we will finish: we will set the correct permissions in the Component Services

Step 8

Open your Component Servies as an Administrator. To do so:

1. Click Start (Windows logo)
2. Type Component services
3. Right-click Component Services
4. Click Run as administrator
   
   

Step 9

In Component Services

1. Navigate to Component Services -> Computers -> My computer -> DCOM Config
2. Scroll down to Immersive Shell (as we noted in step 4. Was there another application name for you? Then look it up.)
3. Right-click the Immersive Shell application name
4. Click Properties
   

Step 10

In the Immersive Shell Properties window

1. Click Customize under Launch and Activation Permissions.
2. Click Edit
3. In the Launch and Activation window, click Add.
4. Type local service and click OK. (the name “local service” corresponds to the User we noted in step 2)

Step 11

Now that we have added Local Service:

1. Select LOCAL SERVICE, check “Local Activation” (we also noted the Local Activation in step 2, as Permissions)
2. Click OK
3. Click OK again to close all windows

That should be it! Reboot your computer and see whether the errors return (or not, hopefully).
Is something unclear or do you run into something? Let me know in a comment! I would like to help you

Note 1

You may face a Windows Security message at step 10. if so, select Remove.

Sources:
https://support.microsoft.com/en-us/help/4022522/dcom-event-id-10016-is-logged-in-windows
https://www.itexperience.net/2018/12/02/event-id-10016-fix-the-application-specific-permission-settings-do-not-grant-local-activation-permission-for-the-com-server-application-with-clsid/