Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 10000 Source: DCOM

Source
Level
Description
Unable to start a DCOM Server: {<GUID>}. The error: <error description> Happened while starting this command: <command> -Embedding
Comments
 
GUID: 1F87137D-0E7C-44D5-8C73-4EFFB68962F2, error: "The system cannot find the file specified." -  In my case, this does not seem to be related to Messenger (I do not use it or have uninstalled it). I have used the Dcomcnfg.exe util which finds an unwritten Adobe Acrobat related issue which it then records. However this makes no difference and it doesn't solve the problem. This issue seems to prevent many processes from starting and system tray icons do not load. It also delays boot up.
- GUID: {E63F16AA-7C16-4697-826C-98B7A5092299} - See "Citrix Support Document ID: CTX102954" and "Citrix Support Document ID: CTX104534".
- GUID: {E0B8F398-BB08-4298-87F0-34502693902E} - From a newsgroup post: "This may have occurred because you manually removed Windows Messenger. What you can do however, is disable the Messenger integration feature in Outlook. To do so, for Outlook (XP/2002), just open Outlook, click the Tools menu, then Options, then the Other tab, and uncheck “Enable Instant Messaging in Microsoft Outlook”. For Outlook Express, close Outlook Express, and run this .reg file (first save the contents to a file with a reg extension):

[HKEY_CURRENT_USER\Software\Microsoft\Outlook Express]
"Hide Messenger"=dword:00000002".

From a newsgroup post: "If you have a folder named “<drive:>\Program Files\Microsoft” in addition to “<drive:>\Program Files\Microsoft Office”, rename the first folder to something else. This is a known WinNT bug".

As per Microsoft: "The Component Object Model (COM) infrastructure could not activate the requested server. Possible causes include:
- There is not enough memory available
- An error occurred with another file that the COM infrastructure depends on". See MSW2KDB for more information.

See the link to ME247962 for additional information on this event.
This issue occurs when registry entries that are required for Winlogon notifications are missing from the registry of the Terminal Server computer. See ME914052 for details on this issue.

This event may occur if you try to install Media Center Extender for Windows XP Media Center Edition when Windows XP Media Center Edition 2005 is installed on a dynamic disk. See ME896029 for a solution to this problem.

See ME911143 and ME924209 for additional information about this event.
In my case the problem happened while starting the command “C:\WINDOWS\System32\wbem\wmiprvse.exe -Embedding". By giving the rights (Read/Execute/List) to the Network service on the C:\ drive, I fixed my problem.
I was getting the event 10000 error on the server, and the message below on the client, but the following newsgroup comment fixed my problem: If you are running Outlook 2000 and Windows 2000 and you are getting the message "Microsoft Exchange Address Book was unable to log on to the Microsoft Exchange Server computer. Contact your system administrator if the problem persists", check for these registry entries on your client machine. If they are not there, add them and it will probably fix your problem:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\ClientProtocols]
"ncacn_np"="rpcrt4.dll"
"ncacn_ip_tcp"="rpcrt4.dll"
"ncadg_ip_udp"="rpcrt4.dll"
"ncacn_nb_tcp"="rpcrt4.dll"
"ncacn_http"="rpcrt4.dll"


In Windows XP, the MSN messenger program tries to load whenever hotmail services or MSN services are accessed. A fix that I used to prevent this from happening was to rename the "C:\Program Files\Messenger" folder. Unfortunately, this seems to cause constant event id 10000 DCOM "failed to start" errors as the system looks for "C:\Program Files\Messenger\msmsgs.exe".
A newsgroup post mentions ME173430 - the existence of a folder called "program" under the root may cause such problems (see the link for more details).

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...