You may encounter the following type of errors in the System event log:
This problem can be fixed through the following steps:
1. Find the application name
As you can notice there are two ID numbers in the error message: the CLSID and the APPID.
Take the APPID and search for the matching registry key under HKLM:\SOFTWARE\Classes\appid.
Get-ItemProperty 'HKLM:\SOFTWARE\Classes\appid\{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}'
You will notice the application name.
2. Check your permissions
Verify that you have Full Control permissions on this same registry key.
Otherwise, grant yourself those permissions.
Note: You may have to take ownership of the registry key before you are able to change its permissions…
3. Change the AppID’s permissions
- Open the Component Services administrative tool by typing dcomcnfg in a command line.1
- Expand Component Services \ Computers \ My Computer
- Go to DCOM Config and in the menu select View by Details.
- Find your application and notice the Application ID on the right which is the same than in the event message.
- Right-click the application and select Properties
- Select the Security tab. Note: If the buttons appear as grayed out, this means you didn’t set correctly the permissions on your account and you must go back to the former subtitle of this post.
- Watch again your event ID and note:
- the account which is missing permissions (in my example above: NT AUTHORITY\SYSTEM SID
(S-1-5-18)) - the type of missing permissions (in my example above: Local Activation)
- the account which is missing permissions (in my example above: NT AUTHORITY\SYSTEM SID
- Set permissions accordingly.
In my example I would have following permissions to set:
- Alternatively, you can open the console from the Start menu in the Administrative
Tools, or add the Component Services snap-in in an MMC console. ↩