There are 3 yellow-icon warnings in the event viewer application group, with this explanation: "Profile notification of event Load for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details." Not particularly helpful, but the entry does point to SYSTEM as the user.
In the SYSTEM group, there are errors at a comparable (but not identical) time-stamp for "Event 10016, Distributed DCOM" which provide this general description:
"The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user RIVENDELL2\James Vance SID (S-1-5-21-3774824159-2135294730-2250967024-1002) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
The detailed description for that same event in friendly mode provides this:
- System
- Provider
[ Name] Microsoft-Windows-DistributedCOM
[ Guid] {1B562E86-B7AA-4131-BADC-B6F3A001407E}
[ EventSourceName] DCOM
- EventID 10016
[ Qualifiers] 0
Version 0
Level 2
Task 0
Opcode 0
Keywords 0x8080000000000000
- TimeCreated
[ SystemTime] 2019-06-14T17:28:28.935986400Z
EventRecordID 25718
Correlation
- Execution
[ ProcessID] 1556
[ ThreadID] 2432
Channel System
Computer Rivendell2
- Security
[ UserID] S-1-5-21-3774824159-2135294730-2250967024-1002
- EventData
param1 application-specific
param2 Local
param3 Activation
param4 {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
param5 {15C20B67-12E7-4BB6-92BB-7AFF07997402}
param6 RIVENDELL2
param7 James Vance
param8 S-1-5-21-3774824159-2135294730-2250967024-1002
param9 LocalHost (Using LRPC)
param10 Unavailable
param11 Unavailable
------------------------------------
Insofar as an installation log for v4.5.2, I can't find one -- it's occurred to me they may not be created when in safe mode, but don't know. Under the setup group of logs, the last of those dates from Patch Tuesday a few days ago.