Avatar of rodsan
rodsan
 asked on

DCOM Error Event ID 10010

Hi, I am getting an error on my 2012R2 server. It repeats each minute for the last few weeks.

The server {1F87137D-0E7C-44D5-8C73-4EFFB68962F2} did not register with DCOM within the required timeout.

AppId for {1F87137D-0E7C-44D5-8C73-4EFFB68962F2} is Microsoft WMI Provider Subsystem Secured Host. Does anyone has any suggestion what could be the problem?

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
  <EventID Qualifiers="0">10010</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8080000000000000</Keywords>
  <TimeCreated SystemTime="2016-02-20T10:31:29.622764800Z" />
  <EventRecordID>80207</EventRecordID>
  <Correlation />
  <Execution ProcessID="824" ThreadID="20040" />
  <Channel>System</Channel>
  <Computer>xxxxxxxxxxxxxxxxx</Computer>
  <Security UserID="S-1-5-20" />
  </System>
- <EventData>
  <Data Name="param1">{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}</Data>
  </EventData>
  </Event>
Windows Server 2012

Avatar of undefined
Last Comment
rodsan

8/22/2022 - Mon
Matt Minor

I remember having this error occur for me at one point also, and it was something related to permissions.

Have a look at this article:
 https://social.technet.microsoft.com/Forums/en-US/f7211cff-9221-4cc5-aea8-16bd7797a93c/event-id-10010-dcom-error?forum=winservermanager

It related to Server 08 R2, but the process should be very close in similarity,
ASKER CERTIFIED SOLUTION
rodsan

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
rodsan

ASKER
The error came back after few days.

I checked permissions in registry HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44d5-8C73-4EFFB68962F2}, but everything is as it should be. Security configuration in DCOM for Microsoft WMI Provider Subsystem Secured Host is also set as it should be. No events before first DCOM error that could show something to happen.

Any ideas what else could cause this?
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck