DCOM

From Piszczynski
Revision as of 22:31, 15 November 2023 by Aleks (talk | contribs) (1 revision imported)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

DCOM Distributed COM Errors / Events

DCOM errors are due to apps that use the DCOM model. This is a Microsoft component that allows the applications to communicate with each other over the network using COM objects. You can find these applications and objects in the "Component Services" tool in windows.

The Event Error will often give you an SID/GUID which is useless for finding out what is causing the error. You can search for it in component services or locate the SID in the following registry location:

  • HKLM\SOFTWARE\Classes\CLSID\<SID of application>

Take the SID seen in the event and search in the reg in this location eg:

  • HKLM:\SOFTWARE\Classes\CLSID\:> get-childitem *D63B10C5-BB46-4990-A94F-E40B9D520160*

This should give you the name of the application that you can use to find in component services and further the troubleshooting.