Link to home
Create AccountLog in
Avatar of rodsan
rodsan

asked on

DCOM Error Event ID 10010

Hi, I am getting an error on my 2012R2 server. It repeats each minute for the last few weeks.

The server {1F87137D-0E7C-44D5-8C73-4EFFB68962F2} did not register with DCOM within the required timeout.

AppId for {1F87137D-0E7C-44D5-8C73-4EFFB68962F2} is Microsoft WMI Provider Subsystem Secured Host. Does anyone has any suggestion what could be the problem?

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
  <EventID Qualifiers="0">10010</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8080000000000000</Keywords>
  <TimeCreated SystemTime="2016-02-20T10:31:29.622764800Z" />
  <EventRecordID>80207</EventRecordID>
  <Correlation />
  <Execution ProcessID="824" ThreadID="20040" />
  <Channel>System</Channel>
  <Computer>xxxxxxxxxxxxxxxxx</Computer>
  <Security UserID="S-1-5-20" />
  </System>
- <EventData>
  <Data Name="param1">{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}</Data>
  </EventData>
  </Event>
Avatar of Matt Minor
Matt Minor
Flag of Canada image

I remember having this error occur for me at one point also, and it was something related to permissions.

Have a look at this article:
 https://social.technet.microsoft.com/Forums/en-US/f7211cff-9221-4cc5-aea8-16bd7797a93c/event-id-10010-dcom-error?forum=winservermanager

It related to Server 08 R2, but the process should be very close in similarity,
ASKER CERTIFIED SOLUTION
Avatar of rodsan
rodsan

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of rodsan
rodsan

ASKER

The error came back after few days.

I checked permissions in registry HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44d5-8C73-4EFFB68962F2}, but everything is as it should be. Security configuration in DCOM for Microsoft WMI Provider Subsystem Secured Host is also set as it should be. No events before first DCOM error that could show something to happen.

Any ideas what else could cause this?