Event ID - 10021

Event Id	10021
Source	DCOM
Description	The launch and activation security descriptor for the COM Server application with CLSID {} is invalid. It contains Access Control Entries with permissions that are invalid. The requested action was therefore not performed. This security permission can be corrected using the Component Services administrative tool.
Event Information	According to Microsoft : Cause : A program, the Clsid displayed in the message, tried to start the DCOM server by using the DCOM infrastructure. However the permission associated with the DCOM Server was not correctly set up. Resolution : Verify that the user has the appropriate permissions to start the DCOM server. To assign permissions Using Regedit, navigate to the following registry value HKCR\Clsid\clsid value\localserver32 The clsid value is the information displayed in the message. In the right pane, double-click Default . The Edit String dialog box is displayed. Leave this dialog box open. Click Start , and then click Control Panel. Double-click Administrative Tools , and then double-click Component Services. In the Component Services snap-in, expand Computers , expand My Computer , and double-click DCOM Config. In the right pane, locate the program by using its friendly name. Right-click the program name, and then select Properties. On the Security tab, in the Launch and Activation Permissions group box, select Customize , and then click Edit .
Reference Links	Event ID 10021 from Source DCOM

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught