Application consistent warning in event viewer

AIDEN XKL 0 Reputation points
2024-05-28T07:19:47.0166667+00:00

The log below is keep repeating in event viewer , what is it should I be worried ?

Description:

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

Windows.SecurityCenter.WscBrokerManager

and APPID

Unavailable

to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,772 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jing Zhou 4,670 Reputation points Microsoft Vendor
    2024-05-28T09:55:51.6566667+00:00

    Hello,

    Thank you for posting in Q&A forum.

    Repeated occurrences of the following logs in the Event Viewer may indicate permission configuration issues:

    This log indicates that a COM server application has not been granted local startup permission. This is usually caused by insufficient permissions in the DCOM configuration. If these error logs frequently appear, it may affect the stability of the system or the normal operation of certain specific functions. Therefore, it is recommended to address this permission issue to ensure the normal operation of the system.

    We suggest you try the following solutions:

    Open component service: Press Win+R to open the runtime window, enter dcomcnfg, and press Enter.

    Navigation to DCOM Configuration: In the "Component Services" window, expand "Component Services" ->"Computers" ->"My Computer" ->"DCOM Configuration".

    Find the problematic application: Find Windows with CLSID in the right pane The item for SecurityCenter.WscBrokerManager.

    Modify permissions: Right click on the item and select "Properties". In the "Security" tab, select "Activate and Activate Permissions" and "Access Permissions" respectively, and then click "Edit".

    Add permissions: In the startup and activation permissions, ensure that NT Authorization \ SYSTEM has local startup and local activation permissions.

    Ensure that NT Authorization \ SYSTEM has local access permissions in the access permissions.

    Apply changes: Confirm all changes and close the properties window.

    After completing the above steps, restart the computer and check if the same error log still appears in the Event Viewer. If the problem persists, further checks of system configuration and permission settings may be necessary.

    Best regards，

    Jill Zhou

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments