Any DCOM permission we need to set on SCCM client? I can see almost all SCCM client also got the following event ID 10016 error. It is actually "Quarantine Private SHA Binding class". What are the permission are required? ====================================================================================================The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {24FF4FDC-1D9F-4195-8C79-0DA39248FF48} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.====================================================================================================

Are you dealing with NAP? If not: just ignore that message. (The permissions required are mentioned in that message: "Local Launch")

Hi, No,not dealing with SCCM NAP at all. But the environment has NAC. Will it be related? It is an error in event viewer, so the customer wants this error to be solved.

What's NAC? Is it using the NAP component of the OS?

Hi, NAC is network access control (infoexpress), I am not sure if it make use of NAP component of the OS. How to totally disable the SCCM NAP?

By the way, I realise the Infoexpress NAC is not install and exist yet. So I believe it's nothing to do with that. Anyway I realise after the SMS Host agent services stop and the service starts again, then this error will appear. Any solution?

As I already mentioned: ignore that. Or see http://social.technet.microsoft.com/Forums/en-us/configmgrgeneral/thread/bc4fca62-10a0-48f5-bcdb-63fe5d3b88d2

Hi Torsten, thanks for reply, but if i started the NAP service on servers with this error flooding, would it affect badly anything else?? appreciate your help M.Zakaria

anybody knows what happens when starting this service without having NAP enabled in the environment, just to get rid of this error... appreciate your advice M.Zakaria