Windows 11 Event ID 10016 Warning

Windows 11 Event ID 10016 Warning
Windows 10 Event viewer Warning ID 10016

This article is a work in-progress, with a partial solution.
This seems to clean up some of the warnings, but not all. This is a frustrating message.

Issue:

Windows System Event:  10016
"The application-specific permission settings do not grant Local Activation permission for the COM server application with CLSID {guid} and APPID {guid}"

"The application-specific permission settings do not grant Local Activation permission for the COM server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402}"

Partial Solution:

1.  Launch the Windows Event Viewer  (Start, type/search "event viewer").
2.  Expand "Windows Logs", "System".  Locate the DistributedCOM warning 10016, illustrated

Click for larger view

3.  Copy into Notepad the two {guid}s.

Your numbers will be different than illustrated and you may need to search through multiple 10016 messages before you find these CSLID:

  {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
    {15C20B67-12E7-4BB6-92BB-7AFF07997402}


4.  Start, type/search "RegEdit".  Run as Administrator.

     In RegEdit, scroll to the top of the tree. 
     Highlight the first folder, "Computer", to anchor the cursor.

     Ctrl-F (find), search for the first {guid};

yours will be probably different.  Search minus the {braces}:

  2593F8B9-4EAF-457C-B68A-50F6B8EA6B54

5a.Set Permissions:

     On the tree-side, highlight the found key.
     Right-mouse-click, "Permissions"
     Click "Advanced"

     On top-line, click "Owner: 'trusted installer' - Change
     In the names list, type "Administrators"  (with an 's')
     Click OK to accept.|  This returns you to the original Advanced panel.
     Near the top of the panel, click the newly exposed '[x] Replace Owner on subcontainer and objects'

     Click OK to return to the original Permissions/Security Panel
     Continue with Step 5b.

 If "Unable to save permission changes Access Denied", you did not properly change "from trusted installer to "Administrators".

5b. On the Permissions panel, highlight "Users (your computer\Users)"

      Highlight "Users" and again click Advanced
      Re-highlight "Users" (a second time)
      Edit
      [x] Full Control, Click OK, returning to the original Advanced panel.

Near the bottom of the panel, click [x] "Replace all child object permissions with inheritable permission entries..."

      Click Apply, and confirm the setting.

      Click OK, returning to the Permissions panel.
      Close the Permissions panel, returning to the RegEdit Tree.          

6.  In RegEdit, tree-side, re-anchor the top-level folder and search for the second {guid}, your number may be different.
    {15C20B67-12E7-4BB6-92BB-7AFF07997402}

     Ctrl-F (find).   Paste the second {guid}.

Warning: You may find this GUID within the first GUID.  Ignore the first and press F3 to repeat the find.

     You will arrive in the WOW6432Nod/AppID tree

     Highlight the found key {15C20B67-12E7-4BB6-92BB-7AFF07997402}
     Repeat steps 5a, and 5b

Setting a new Owner
Setting [x] Full Control

(Close RegEdit)

Continue with these steps:

7a. Windows 11: Start, Search "Component Services.  Run as administrator.

     In Windows 10:  Start, type/search "Windows Tools"
     (In Windows Start Menu, type/search "Administrative Tools")

     Right-mouse-click "Component Services", Run as Administrator.
     On the tree-side, expand: Computers.
     Double-click "Computers"
     Right-mouse-click "My Computer", "Properties"
     Select the [COM Security] tab

7b. In the first box:  "Access Permissions", click "Edit Default"

You will see:
SELF
SYSTEM
Administrators

    Click "Add",
    Add "Local Service"
    Confirm [x] Local Access is checked
    Confirm [  ] Remote Access is unchecked

7c. In the second section: "Launch and Activation Permissions"
     Click "Edit Default"

You will see:

SYSTEM
Administrators
Interactive

    Again add "Local Service"
    Grant [x] Launch Local
    Grant [x] Local Activation

    Add a second user, Add "(your local user name.  For example, mine is trayw")*
    Grant [x] Launch Local
    Grant [x] Local Activation

*Find your local account by Start, Run, CMD.  Note the username:  C:\Users\trayw or by typing 'whomai" at the same DOS Prompt.

Your comments welcome.

Related articles:
Windows 11 Tuneup
https://keyliner.blogspot.com/2021/11/windows-11-tuning.html