It is currently Tue Oct 20, 2026 6:55 am


explorer.exe does not load on start up

All versions of Windows 7, 2008 and Vista including 32 bit and 64 bit

Moderator: icecube

Post a reply

Postby Gecko » Mon Aug 20, 2007 1:36 pm

User avatar
Gecko
Super Moderator
Super Moderator
 
Posts: 5209
Joined: Thu Oct 25, 2001 1:00 am
Location: Florida, USA

Thanks given:1
Thanks received:23
Top

Postby Crazynutt » Wed Aug 29, 2007 2:01 am

Sorry about the long delay, I did not get an email notification and I did not see the second page each time I checked :P

Anyway, here are the logs.

I've also noticed over the last couple of days that the computer restarts itself at random times, I cannot work out what is doing it...I'm assuming some of these entries will tell you that :) If that could it would be much appreciated.

I've also noticed that the rundll error seems to happen when programs try to connect to the net, but can't...sometimes even when they can, but usually it is when there is internet activity. Other programs run fine without the error.


---------------------


Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 24/07/2007 11:17:22 PM
Event ID: 10111
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: Joss-PC
Description:
The device iPod (location (unknown)) is offline due to a user-mode driver crash. Windows will attempt to restart the device 5 more times. Please contact the device manufacturer for more information about this problem.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2e35aaeb-857f-4beb-a418-2e6c0e54d988}" />
<EventID>10111</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2007-07-24T13:17:22.727Z" />
<EventRecordID>19569</EventRecordID>
<Correlation />
<Execution ProcessID="1092" ThreadID="1452" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UmdfDeviceOffline lifetime="{54BA7008-2738-49A0-8D5D-7783654F99AD}" xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/DriverFrameworks/UserMode/Event">
<DeviceInfo>
<FriendlyName>iPod </FriendlyName>
<Location>(unknown)</Location>
<InstanceId>WPDBUSENUMROOT\UMB\2&amp;37C186B&amp;0&amp;STORAGE#VOLUME#1&amp;19F7E59C&amp;0&amp;_??_USBSTOR#DISK&amp;VEN_APPLE&amp;PROD_IPOD&amp;REV_2.70#000A270010335734&amp;0#</InstanceId>
</DeviceInfo>
<RestartCount>5</RestartCount>
</UmdfDeviceOffline>
</UserData>
</Event>

Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 1/08/2007 6:36:30 AM
Event ID: 10110
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: Joss-PC
Description:
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated. This may temporarily interrupt your ability to access the devices.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2e35aaeb-857f-4beb-a418-2e6c0e54d988}" />
<EventID>10110</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2007-07-31T20:36:30.994Z" />
<EventRecordID>28289</EventRecordID>
<Correlation />
<Execution ProcessID="1108" ThreadID="1476" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UMDFHostProblem lifetime="{29CCD28D-D3E9-4AA1-AE37-6A47DC8DB996}" xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/DriverFrameworks/UserMode/Event">
<Problem code="8" detectedBy="2">
</Problem>
<ExitCode>0</ExitCode>
<Operation code="259">
<Message>0</Message>
<Status>4294967295</Status>
</Operation>
</UMDFHostProblem>
</UserData>
</Event>

Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 31/07/2007 11:34:29 PM
Event ID: 10110
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: Joss-PC
Description:
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated. This may temporarily interrupt your ability to access the devices.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2e35aaeb-857f-4beb-a418-2e6c0e54d988}" />
<EventID>10110</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2007-07-31T13:34:29.323Z" />
<EventRecordID>28165</EventRecordID>
<Correlation />
<Execution ProcessID="1096" ThreadID="1424" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UMDFHostProblem lifetime="{94748FDF-FC5C-4B49-890A-BD5B5A0B299B}" xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/DriverFrameworks/UserMode/Event">
<Problem code="8" detectedBy="2">
</Problem>
<ExitCode>0</ExitCode>
<Operation code="259">
<Message>0</Message>
<Status>4294967295</Status>
</Operation>
</UMDFHostProblem>
</UserData>
</Event>

Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 31/07/2007 11:34:29 PM
Event ID: 10111
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: Joss-PC
Description:
The device iPod (location (unknown)) is offline due to a user-mode driver crash. Windows will attempt to restart the device 5 more times. Please contact the device manufacturer for more information about this problem.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2e35aaeb-857f-4beb-a418-2e6c0e54d988}" />
<EventID>10111</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2007-07-31T13:34:29.323Z" />
<EventRecordID>28166</EventRecordID>
<Correlation />
<Execution ProcessID="1096" ThreadID="1424" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UmdfDeviceOffline lifetime="{94748FDF-FC5C-4B49-890A-BD5B5A0B299B}" xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/DriverFrameworks/UserMode/Event">
<DeviceInfo>
<FriendlyName>iPod </FriendlyName>
<Location>(unknown)</Location>
<InstanceId>WPDBUSENUMROOT\UMB\2&amp;37C186B&amp;0&amp;STORAGE#VOLUME#1&amp;19F7E59C&amp;0&amp;_??_USBSTOR#DISK&amp;VEN_APPLE&amp;PROD_IPOD&amp;REV_2.70#000A270010335734&amp;0#</InstanceId>
</DeviceInfo>
<RestartCount>5</RestartCount>
</UmdfDeviceOffline>
</UserData>
</Event>

Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 24/07/2007 11:17:22 PM
Event ID: 10110
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: Joss-PC
Description:
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated. This may temporarily interrupt your ability to access the devices.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2e35aaeb-857f-4beb-a418-2e6c0e54d988}" />
<EventID>10110</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2007-07-24T13:17:22.727Z" />
<EventRecordID>19568</EventRecordID>
<Correlation />
<Execution ProcessID="1092" ThreadID="1452" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UMDFHostProblem lifetime="{54BA7008-2738-49A0-8D5D-7783654F99AD}" xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/DriverFrameworks/UserMode/Event">
<Problem code="8" detectedBy="2">
</Problem>
<ExitCode>0</ExitCode>
<Operation code="259">
<Message>0</Message>
<Status>4294967295</Status>
</Operation>
</UMDFHostProblem>
</UserData>
</Event>

Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 1/08/2007 6:36:30 AM
Event ID: 10111
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: Joss-PC
Description:
The device iPod (location (unknown)) is offline due to a user-mode driver crash. Windows will attempt to restart the device 5 more times. Please contact the device manufacturer for more information about this problem.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2e35aaeb-857f-4beb-a418-2e6c0e54d988}" />
<EventID>10111</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2007-07-31T20:36:30.994Z" />
<EventRecordID>28290</EventRecordID>
<Correlation />
<Execution ProcessID="1108" ThreadID="1476" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UmdfDeviceOffline lifetime="{29CCD28D-D3E9-4AA1-AE37-6A47DC8DB996}" xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/DriverFrameworks/UserMode/Event">
<DeviceInfo>
<FriendlyName>iPod </FriendlyName>
<Location>(unknown)</Location>
<InstanceId>WPDBUSENUMROOT\UMB\2&amp;37C186B&amp;0&amp;STORAGE#VOLUME#1&amp;19F7E59C&amp;0&amp;_??_USBSTOR#DISK&amp;VEN_APPLE&amp;PROD_IPOD&amp;REV_2.70#000A270010335734&amp;0#</InstanceId>
</DeviceInfo>
<RestartCount>5</RestartCount>
</UmdfDeviceOffline>
</UserData>
</Event>

Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 22/08/2007 10:53:38 PM
Event ID: 10110
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: JOSSPC
Description:
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated. This may temporarily interrupt your ability to access the devices.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2e35aaeb-857f-4beb-a418-2e6c0e54d988}" />
<EventID>10110</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2007-08-22T12:53:38.224Z" />
<EventRecordID>51222</EventRecordID>
<Correlation />
<Execution ProcessID="1124" ThreadID="1520" />
<Channel>System</Channel>
<Computer>JOSSPC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UMDFHostProblem lifetime="{47E00EE9-77F8-4BBA-AAA7-B67675E2D87B}" xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/DriverFrameworks/UserMode/Event">
<Problem code="8" detectedBy="2">
</Problem>
<ExitCode>0</ExitCode>
<Operation code="259">
<Message>0</Message>
<Status>4294967295</Status>
</Operation>
</UMDFHostProblem>
</UserData>
</Event>

Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 22/08/2007 10:53:38 PM
Event ID: 10111
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: JOSSPC
Description:
The device iPod (location (unknown)) is offline due to a user-mode driver crash. Windows will attempt to restart the device 5 more times. Please contact the device manufacturer for more information about this problem.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2e35aaeb-857f-4beb-a418-2e6c0e54d988}" />
<EventID>10111</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2007-08-22T12:53:38.225Z" />
<EventRecordID>51223</EventRecordID>
<Correlation />
<Execution ProcessID="1124" ThreadID="1520" />
<Channel>System</Channel>
<Computer>JOSSPC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UmdfDeviceOffline lifetime="{47E00EE9-77F8-4BBA-AAA7-B67675E2D87B}" xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/DriverFrameworks/UserMode/Event">
<DeviceInfo>
<FriendlyName>iPod </FriendlyName>
<Location>(unknown)</Location>
<InstanceId>WPDBUSENUMROOT\UMB\2&amp;37C186B&amp;0&amp;STORAGE#VOLUME#1&amp;19F7E59C&amp;0&amp;_??_USBSTOR#DISK&amp;VEN_APPLE&amp;PROD_IPOD&amp;REV_2.70#000A270010335734&amp;0#</InstanceId>
</DeviceInfo>
<RestartCount>5</RestartCount>
</UmdfDeviceOffline>
</UserData>
</Event>

Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 22/08/2007 11:59:01 PM
Event ID: 10111
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: JOSSPC
Description:
The device iPod (location (unknown)) is offline due to a user-mode driver crash. Windows will attempt to restart the device 5 more times. Please contact the device manufacturer for more information about this problem.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2e35aaeb-857f-4beb-a418-2e6c0e54d988}" />
<EventID>10111</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2007-08-22T13:59:01.177Z" />
<EventRecordID>51227</EventRecordID>
<Correlation />
<Execution ProcessID="5032" ThreadID="5656" />
<Channel>System</Channel>
<Computer>JOSSPC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UmdfDeviceOffline lifetime="{577A6FC4-B605-4B08-96EF-8DC8FA2F0BE8}" xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/DriverFrameworks/UserMode/Event">
<DeviceInfo>
<FriendlyName>iPod </FriendlyName>
<Location>(unknown)</Location>
<InstanceId>WPDBUSENUMROOT\UMB\2&amp;37C186B&amp;0&amp;STORAGE#VOLUME#1&amp;19F7E59C&amp;0&amp;_??_USBSTOR#DISK&amp;VEN_APPLE&amp;PROD_IPOD&amp;REV_2.70#000A270010335734&amp;0#</InstanceId>
</DeviceInfo>
<RestartCount>5</RestartCount>
</UmdfDeviceOffline>
</UserData>
</Event>

Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 22/08/2007 11:59:01 PM
Event ID: 10110
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: JOSSPC
Description:
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated. This may temporarily interrupt your ability to access the devices.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2e35aaeb-857f-4beb-a418-2e6c0e54d988}" />
<EventID>10110</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2007-08-22T13:59:01.177Z" />
<EventRecordID>51228</EventRecordID>
<Correlation />
<Execution ProcessID="5032" ThreadID="5656" />
<Channel>System</Channel>
<Computer>JOSSPC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UMDFHostProblem lifetime="{577A6FC4-B605-4B08-96EF-8DC8FA2F0BE8}" xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/DriverFrameworks/UserMode/Event">
<Problem code="8" detectedBy="2">
</Problem>
<ExitCode>0</ExitCode>
<Operation code="259">
<Message>0</Message>
<Status>4294967295</Status>
</Operation>
</UMDFHostProblem>
</UserData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38119</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38117</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38118</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38114</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38113</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38116</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38115</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:42 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:42.000Z" />
<EventRecordID>38127</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:42 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:42.000Z" />
<EventRecordID>38126</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:42 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:42.000Z" />
<EventRecordID>38128</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:42 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:42.000Z" />
<EventRecordID>38130</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:42 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:42.000Z" />
<EventRecordID>38129</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:42 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:42.000Z" />
<EventRecordID>38125</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38121</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38120</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38122</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38124</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:41 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:41.000Z" />
<EventRecordID>38123</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:38 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:38.000Z" />
<EventRecordID>38097</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:38 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-08-11T12:50:38.000Z" />
<EventRecordID>38096</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Joss-PC</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data>
<Data Name="param5">NT AUTHORITY</Data>
<Data Name="param6">NETWORK SERVICE</Data>
<Data Name="param7">S-1-5-20</Data>
<Data Name="param8">LocalHost (Using LRPC)</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/08/2007 10:50:38 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: NETWORK SERVICE
Computer: Joss-PC
Description:
The machi
Crazynutt
Newbie
Newbie
 
Posts: 12
Joined: Thu Aug 16, 2007 2:31 pm

Thanks given:0
Thanks received:0
Top

Postby Gecko » Wed Aug 29, 2007 12:49 pm

Crazynutt,

Click Start, and then click Control Panel.
Double-click Programs and Features.
Click Turn Windows features on or off.
Note If you are prompted for an administrator password or for a confirmation, type the password, or click Continue.

Click to clear the Windows Process Activation Service check box, and then click OK.
Click Restart Now to restart the computer.
User avatar
Gecko
Super Moderator
Super Moderator
 
Posts: 5209
Joined: Thu Oct 25, 2001 1:00 am
Location: Florida, USA

Thanks given:1
Thanks received:23
Top

Postby Crazynutt » Wed Aug 29, 2007 11:45 pm

Hey Gecko, I went to do this, however the box for that option is already unchecked.
Crazynutt
Newbie
Newbie
 
Posts: 12
Joined: Thu Aug 16, 2007 2:31 pm

Thanks given:0
Thanks received:0
Top

Postby Gecko » Thu Aug 30, 2007 12:33 pm

Crazynutt,

I'll have to get my Vista system booted up to see if I can recreate your problem or find a solution.
It almost sounds like some hardware is not compatible to vista or needs updated drivers.
User avatar
Gecko
Super Moderator
Super Moderator
 
Posts: 5209
Joined: Thu Oct 25, 2001 1:00 am
Location: Florida, USA

Thanks given:1
Thanks received:23
Top

Postby Crazynutt » Thu Aug 30, 2007 12:37 pm

That's a bit of a pain.

I can't remember if the run dll issue has been happening since Vista install or not, but the random restarts has only just started happening.

I have not installed any extra hardware recently that would be causing this, and I believe that the drivers are up to date. I have been using 'Driver Agent' to check this out and also the Windows Update feature.

Can you suggest any other methods of keeping them up to date?
Crazynutt
Newbie
Newbie
 
Posts: 12
Joined: Thu Aug 16, 2007 2:31 pm

Thanks given:0
Thanks received:0
Top
Previous
Post a reply

Return to Windows 7, 2008 and Vista

Who is online

Users browsing this forum: No registered users and 29 guests

cron