Windows 10 Random restarts

[lijongtao]

OK so a few weeks ago my PC screen would go off and the oc would reboot. There is no rhyme or reason to it. I am not watching videos or doing anything that would cause it to crash. I am getting an event error 10016

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user DESKTOP-7R954NS\ThamesSide SID (S-1-5-21-83517162-561681497-2379091246-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Log Name: SystemSource: Microsoft-Windows-DistributedCOMDate: 17/03/2018 03:06:38Event ID: 10016Task Category: NoneLevel: ErrorKeywords: ClassicUser: DESKTOP-7R954NS\ThamesSideComputer: DESKTOP-7R954NSDescription:The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user DESKTOP-7R954NS\ThamesSide SID (S-1-5-21-83517162-561681497-2379091246-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" /> <EventID Qualifiers="0">10016</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2018-03-17T03:06:38.564011200Z" /> <EventRecordID>1084</EventRecordID> <Correlation /> <Execution ProcessID="300" ThreadID="1268" /> <Channel>System</Channel> <Computer>DESKTOP-7R954NS</Computer> <Security UserID="S-1-5-21-83517162-561681497-2379091246-1001" /> </System> <EventData> <Data Name="param1">application-specific</Data> <Data Name="param2">Local</Data> <Data Name="param3">Activation</Data> <Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data> <Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data> <Data Name="param6">DESKTOP-7R954NS</Data> <Data Name="param7">ThamesSide</Data> <Data Name="param8">S-1-5-21-83517162-561681497-2379091246-1001</Data> <Data Name="param9">LocalHost (Using LRPC)</Data> <Data Name="param10">Unavailable</Data> <Data Name="param11">Unavailable</Data> </EventData></Event>

And so 2 days ago I did a complete system reset and reinstalled Windows 10 and have nothing on other than Chrome and it is doing it again. This is the log above.

Can anyone shed any light on this shutdown occuring? thanks Li

 

[Neemobeer]

DCOM permission events are irrelevant. You will want to filter the system log for 'Kernel-Power' events and User32 (main one to look at)

 

[lijongtao]

Is that in events viewer..under windows logs and system?

 

[Neemobeer]

Yes

 

[lijongtao]

DCOM permission events are irrelevant. You will want to filter the system log for 'Kernel-Power' events and User32 (main one to look at)

OK So again tonight withing 5 minutes of turning the PC on it rebooted itself again.
In the events viewer I had this

Event ID 16 Kernel General
The access history in hive \??\C:\WINDOWS\AppCompat\Programs\Amcache.hve was cleared updating 1215 keys and creating 444 modified pages.

And Event ID 7026 Service Control Manager
The following boot-start or system-start driver(s) did not load:

I have attached a screenshot Thank you



dam

 

[Neemobeer]

Did you look for the User32 events?

 

[lijongtao]

1074

The process C:\WINDOWS\system32\winlogon.exe (DESKTOP-7R954NS) has initiated the shutdown of computer DESKTOP-7R954NS on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x500ff
Shutdown Type: shutdown
Comment:


1074

The process Explorer.EXE has initiated the shutdown of computer DESKTOP-7R954NS on behalf of user DESKTOP-7R954NS\ThamesSide for the following reason: Other (Planned)
Reason Code: 0x80000000
Shutdown Type: shutdown
Comment:

The process Explorer.EXE has initiated the shutdown of computer DESKTOP-7R954NS on behalf of user DESKTOP-7R954NS\ThamesSide for the following reason: Other (Planned)
Reason Code: 0x80000000
Shutdown Type: shutdown
Comment:

The process Explorer.EXE has initiated the shutdown of computer DESKTOP-7R954NS on behalf of user DESKTOP-7R954NS\ThamesSide for the following reason: Other (Planned)
Reason Code: 0x80000000

The process Explorer.EXE has initiated the shutdown of computer DESKTOP-7R954NS on behalf of user DESKTOP-7R954NS\ThamesSide for the following reason: Other (Planned)
Reason Code: 0x80000000

The process C:\WINDOWS\system32\winlogon.exe (DESKTOP-7R954NS) has initiated the shutdown of computer DESKTOP-7R954NS on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found

The process Explorer.EXE has initiated the shutdown of computer DESKTOP-7R954NS on behalf of user DESKTOP-7R954NS\ThamesSide for the following reason: Other (Planned)
Reason Code: 0x80000000

I have quite a few of the last one on here all saying the same. It is a fresh install of Win 10 with writing over the last install not on top of.

 

[Neemobeer]

Under most contexts those are normal. Those events are logged every time the computer shuts down or reboots. Something could be running with your user rights and kicking off a reboot.

It could be a scheduled task, service or a program listed in the start up tab.

 

[lijongtao]

Under most contexts those are normal. Those events are logged every time the computer shuts down or reboots. Something could be running with your user rights and kicking off a reboot.

It could be a scheduled task, service or a program listed in the start up tab.

Thank you sincerely for the help, much appreciated.