Windows 10 Event id 10016 Error

Reference 1. Numerous event id 10016 errors win 8 pro 64 bit
Reference 2. Fix: Weather App Creates Too Many Error Events

電腦預設權限設定無法將含有 CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} 與 APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} 之 COM 伺服器應用程式的本機啟用權限授與來自位址 LocalHost (使用 LRPC) (在應用程式容器 Microsoft.Windows.Cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) 中執行) 的使用者 W10\cliff SID (S-1-5-21-2584043056-4233733546-2432908853-1001)。您可以使用元件服務系統管理工具修改此安全性權限。

Follow these instructions exactly and let me know how you do. It should 100% work.

1. Open Regedit.
2. Go to HKEY_Classes_Root\CLSID\*CLSID*.
Note: *CLSID* stand for the ID that appears in your event viewer error. In your case, it's {C2F03A33-21F5-47FA-B4BB-156362A2F239}.
3. Right click on it then select permission.
4. Click Advance and change the owner to Administrators. Also click the box that will appear below the owner line.
5. Apply full control.
6. Close the tab then go to HKEY_LocalMachine\Software\Classes\AppID\*APPID*.
Note: *AppID* is the ID that appears in your event viewer. In your case it's {316CDED5-E4AE-4B15-9113-7055D84DCC97}.
7. Right click on it then select permission.
8. Click Advance and change the owner to Administrators.
9. Click the box that will appear below the owner line.
10. Click Apply and grant full control to Administrators.
11. Close all tabs and go to Administrative tool.
12. Open component services.
13. Click Computer, click my computer, then click DCOM.
14. Look for the corresponding service "Immersive Shell" Right click and click properties.
15. Click security tab then click Customize in the Launch and Activation permissions section. Click Edit. Click Add. Add Local Service. Then apply.
16. Tick the Local Activation box.

Reboot.

1. {316CDED5-E4AE-4B15-9113-7055D84DCC97} 就是 "Immersive Shell"; 在 regedit 找到
2. item 4 and 8, 碰到一些困難, 先改到 Users 再改成 Administrators
3. item 13 : command is "DCOMCNFG"

Task Scheduling Error : Event 100, Bonjour Service

暫時解法 : Solution 1 : 解除安裝 Bonjour 服務. Solution 2 : Adrian said : Apparently you can ignore this as the Bonjour service (used by iTunes) is quick to record it anytime it "thinks" it experiences an unreasonable delay. If you don't want the event in your logs, you can disable Bonjour (open Services, find Bonjour Service in the list, stop it and change the startup type to "Manual" or "Disabled"). Source: http://www.eventid.net/display-eventid-100-source-Bonjour%20Service-eventno-10659-phase-1.htm The "Task Scheduling Error" type of problems seem to be a common issue on Windows 7 64 bit. Several users ended up stopping the service in order to avoid the logs being filled with these errors. They would only start the service when needed (iTunes needs this service in order to run properly). From our experience, iTunes will start regardless of the status of the Bonjour service, however a warning is displayed saying that Bonjour is needed to access shared libraries. The warning will only be shown once so it won't bother you every time iTunes is started. In iTunes Preferences, the Sharing tab will display a message saying that the Bonjour service is required in order to use this feature.

安裝 iTunes 之後, 事件檢視器中, 持續出現類似以下的錯誤:

Task Scheduling Error: Continuously busy for more than a second
Task Scheduling Error: m->NextScheduledEvent 7004
Task Scheduling Error: m->NextScheduledSPRetry 7004

2014/01/02 : 嘗試於 AP 防火牆中 disable “Filter multicast”. (還是會發生) 2014/01/04 : AP disable “Filter multicast” 之後, 仍然會發生 Event 100 ERROR; 決定解除安裝 Bonjour, and enable “Filter multicast” again. 觀察後續 iTunes 和 iPhone 搭配使用上是否會有問題. 2014/01/09 : 解壓縮 iTunes64Setup.exe 之後, 單獨安裝 Bonjour64.msi. 再觀察看看.(還是會發生) 2014/01/11 : 改變 Windows 防火牆-進階設定-輸入規則-Bonjour 服務 設定 : 4 rules –> 2 rules. .(還是會發生) 原本 : 設定檔(公用)+程式(32 bits or 64 bits mDNSResponder.exe)+通訊協定(TCP or UDP) 新版 : 設定檔(任何)+程式(32 bits or 64 bits mDNSResponder.exe)+通訊協定(任何) 2014/01/11 19:16 : disable AP DD-WRT SPI firewall .(還是會發生) 2014/01/12 05:32 改變網路卡電源管理, 允許電腦關閉這個裝置以節省電源 : Enabled->Disabled (還是會發生) 2014/01/12 09:20 將 iPod 服務由手動改為自動, Bonjour 服務防火牆設定如下 [不是我設的, 系統自己變成這樣] : (還是會發生) 2014/01/15 04:58 關閉 Windows Firewall ( Testing … ) 2014/01/17 03:34 mDNSresponder.exe 改用 x86 版.(還是會發生) 2014/01/17 06:47 改變省電時間設定 ( 10/30 –> 20/20 ) .(還是會發生)

備註 1 : Bonjour 服務需要 UDP port 5353
備註 2 : 需要 Bonjour Service 才能和其他使用者共享音樂, 透過 AirPlay 揚聲器播放音樂, 連接 Apple TV 和使用 iPhone 和iPod touch 遙控器. (目前我似乎用不上)
備註 3 : iTunes64Setup.exe 實際上是一個壓縮檔, 可用 7z.exe 解壓縮.

Virtualbox host-only network error and solution

記錄檔名稱:         Microsoft-Windows-Dhcp-Client/Admin
來源:            Microsoft-Windows-Dhcp-Client
日期:            2013/12/20 上午 03:54:49
事件識別碼:         1001
工作類別:          位址設定狀態事件
等級:            錯誤
關鍵字:          
使用者:           LOCAL SERVICE
電腦:            Cliff-PC
描述:
DHCP 伺服器並未將網路位址指派給電腦在網路位址 0x08002700FCC0 的網路卡。發生下列的錯誤: 0x79。您的電腦將會繼續嘗試從網路位址 (DHCP) 伺服器取得一個位址。

由 Virtualbox host-only adaptor 所引發, 原因不明.

Solution : 手動設定 host-only network in Oracle VM virtualbox GUI

Windows 7: The driver \Driver\WUDFRd failed to load for the device... error Event ID : 219 (212)

idahosurge said :

I seemed to have fixed it thanks to the link you posted in your last response. WUDFRd is a service and it is called "Windows Driver Foundation - User-mode Driver Framework".
Windows Administration - What Is wudfsvc and wudfsvc.dll
I went into services.msc and looked at Windows Driver Foundation - User-mode Driver Framework, it was set to manual, but under "Status" it was off. I plugged in a USB and the status changed to "Started".
I changed the startup type to "Automatic", shut down the PC, restarted, checked to see that it was still set to automatic and that it was started. Plugged in a USB and no error code, plugged in another USB and no error code. Shut down, started again, checked again and no error code.
If you change Windows Driver Foundation - User-mode Driver Framework to automatic start let me know if it works for you. Also before you change it the service has to be stopped. For some reason you can not stop it after it has started so you need to boot your PC and before you do anything go into services.msc and change it before it has started. Your PC may let you stop it, but mine would not.

EVENT ID : 4107

Failed extract of third-party root list from auto update cab at: <Microsoft URL>with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Cause:
There's a lot of info on this error out there in forums, and 99% of it had nothing to do with my problem.

 

Its basically a certificate error, to get to the bottom if it you need to dig a bit deeper.

Fix:
If you have been hunting for a fix, and got here, you may of already tried some or all of these which DID NOT WORK, downloading and installing the certs from the link in the error,or deleting all your expired root certs.

1. First you need to get some detailed logging on what's failing, Click Start > Control Panel > Administrative tools > Event Viewer > Expand Applications and Services > Microsoft > Windows > CAPI2 > Right click "Operations" > Select "Enable Log" >Then reboot.

 

2. Return to the same place in Event Viewer > And open the errors listed there, as you can see "In My Case" the problem is McAfee, after I removed McAfee and installed the latest version (8.7i with patch 3 at time of writing), the error ceased.

 

Note: Your problem may not be McAfee, but at least you now have a better idea of what it is :)

 

SOURCE : http://www.petenetlive.com/KB/Article/0000304.htm

RESOLVED [WIN7] Event ID: 11

On each boot the Event Viewer records the following warning (see below). I have checked the registry key at:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs
and the REG_SZ value is blank. This is where the list of custom DLL's should be. The event viewer records a String Count of "0". With no DLL's being loaded via AppInit, why am I getting this warning?

 

User:          SYSTEM Computer:      OEM-PC Description: Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">   <System>     <Provider Name="Microsoft-Windows-Wininit" Guid="{206F6DEA-D3C5-4D10-BC72-989F03C8B84B}" />     <EventID>11</EventID>     <Version>0</Version>     <Level>3</Level>     <Task>0</Task>     <Opcode>0</Opcode>     <Keywords>0x4000000000000000</Keywords>     <TimeCreated SystemTime="2011-08-05T20:25:27.200853900Z" />     <EventRecordID>328706</EventRecordID>     <Correlation />     <Execution ProcessID="464" ThreadID="500" />     <Channel>System</Channel>     <Computer>OEM-PC</Computer>     <Security UserID="S-1-5-18" />   </System>   <EventData>     <Data Name="StringCount">0</Data>     <Data Name="String">     </Data>   </EventData> </Event>

 

The warning is removed by restoring the following registry key to the default value of "0" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\LoadAppInit_DLLs If a program loads a DLL via AppInit it will set LoadAppInit_DLLs to "1". Problem is that when the program is uninstalled it may not change it back to "0" thus the error, regardless of whether any DLLs are actually being loaded via AppInit.

在安裝 Windows Vista Service Pack 1]、 [Windows 2008]、 [Windows 7] 或 [Windows Server 2008 R2 之後，將會記錄在應用程式記錄檔中的事件識別碼 10

 

特徵 : 在安裝 Windows Vista Service Pack 1 (SP1)]、 [Windows Server 2008]、 [Windows 7] 或 [Windows Server 2008 R2 之後，應用程式記錄檔會記錄下列 WMI 錯誤：

記錄名稱: 應用程式
來源： Microsoft Windows WMI
日期： 2008 年 1 月 18 日 2:37:27 PM
事件識別碼： 10
工作類別： 無
層級： 錯誤
關鍵字： 一般
描述:使用查詢的事件篩選器 」 選取 [* 從 60 WHERE TargetInstance ISA"win32_processor"和 TargetInstance.LoadPercentage 中的 __InstanceModificationEvent > 99"可能不會重新啟動 「 //./root/CIMV2 」 的命名空間錯誤: 0x80041003。無法透過此篩選器傳遞事件，直到問題解決為止。

當您按一下詳細資料錯誤訊息中索引標籤，並選取 [XML] 檢視中，您會收到下列錯誤訊息：

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System>   <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />   <EventID Qualifiers="49152">10</EventID>   <Version>0</Version>   <Level>2</Level>   <Task>0</Task>   <Opcode>0</Opcode>   <Keywords>0x80000000000000</Keywords>   <TimeCreated SystemTime="2011-10-09T06:49:54.000000000Z" />   <EventRecordID>5091</EventRecordID>   <Correlation />   <Execution ProcessID="0" ThreadID="0" />   <Channel>Application</Channel>   <Computer>Cliff-PC</Computer>   <Security />   </System> - <EventData>   <Data>//./root/CIMV2</Data>   <Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99</Data>   <Data>0x80041003</Data>   </EventData>   </Event>

原因  : 如果沒有足夠的權限存取 WMI 篩選器時，就會發生這個問題。

解決方案 : 如果要解決這個問題，執行指令碼，以停止事件識別碼 10 的訊息。若要這段指令碼請依照下列步驟執行：

1. 例如，記事本的文字編輯器中建立新的文字文件，名為 Test.vbs。
2. 下列程式碼貼入 Test.vbs：

   strComputer = "." Set objWMIService = GetObject("winmgmts:" _ & "{impersonationLevel=impersonate}!\\" _ & strComputer & "\root\subscription") Set obj1 = objWMIService.Get("__EventFilter.Name='BVTFilter'") set obj2set = obj1.Associators_("__FilterToConsumerBinding") set obj3set = obj1.References_("__FilterToConsumerBinding") For each obj2 in obj2set                 WScript.echo "Deleting the object"                 WScript.echo obj2.GetObjectText_                 obj2.Delete_ next For each obj3 in obj3set                 WScript.echo "Deleting the object"                 WScript.echo obj3.GetObjectText_                 obj3.Delete_ next WScript.echo "Deleting the object" WScript.echo obj1.GetObjectText_ obj1.Delete_

3. 之後您執行此指令碼事件識別碼 10 的訊息會停止應用程式記錄檔中出現。但是，您必須以手動方式清除任何先前的事件識別碼 10 訊息。

    附註請確定只刪除適當的事件識別碼 10 訊息。可能不想刪除其他相關事件 ID 10 的訊息。

http://support.microsoft.com/kb/950375/zh-tw