System Error Events: DCOM 10016

Recently I got a lot of errors in Event Viewer/System of this type (every other minute, and I think my computer is probably slower due to this):

Event Type:    Error
Event Source:    DCOM
Event Category:    None
Event ID:    10016
Date:        5/31/2010
Time:        10:40:51 PM
User:        NT AUTHORITY\SYSTEM
Computer:    PCCS000188WS
Description:
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18).  This security permission can be modified using the Component Services administrative tool.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Searching through the registry, {24FF4FDC-1D9F-4195-8C79-0DA39248FF48} turns out to be “Quarantine Private SHA Binding class”. A Kaspersky forum thread implies that this error happens because some anti-virus software tries to start and connect to a local NAP(Network Access Protection) Agent service but failed due to permission problems. Another Microsoft TechNet thread also talks about this issue.

I then manually started the “Network Access Protection Agent” service in my Windows XP SP3. The DCOM error now goes away, but every other minute I get a Warning the Event Viewer/System:

Event Type:    Warning
Event Source:    NapAgent
Event Category:    None
Event ID:    39
Date:        6/2/2010
Time:        7:08:57 PM
User:        N/A
Computer:    PCCS000188WS
Description:
The Network Access Protection Agent was unable to determine which HRAs to request a health certificate from.
A network change or if GP is configured, a configuration change will prompt further attempts to acquire a health certificate. Otherwise no further attempts will be made.
Contact the HRA administrator for more information.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Obviously, this is because the NAP Agent could not find the NAP enforcement point or NAP health policy server in the network.

So it seems the only way to get rid of the errors/warnings is to stop the anti-virus software from trying to use NAP agent to report status at all.

One Comment to “System Error Events: DCOM 10016”

  1. Nice article, I had experience of this before but wasnt this is nice to know

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.