Untrusted forest DistributedCOM 10009 Error RRS feed

  • Question

  • We have 1 primary site and 1 untrusted forest that has own management and distribution point site system roles. In the untrusted forest everything seems to be working FEP, Client policies, agent installations, software updates etc.  but in the primary site's event viewer there are lots of DCOM errors ie;


    The description for Event ID 10009 from source Microsoft-Windows-DistributedCOM cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

    If the event originated on another computer, the display information had to be saved with the event.

    The following information was included with the event: 

    SCCM.UNTRUSTEDDOMAIN.LOCAL (untrusted forest's management point FQDN)


    Do you have idea what is causing this error?


    • Edited by HUNAL Wednesday, December 26, 2012 7:51 PM
    Wednesday, December 26, 2012 7:11 PM

All replies

  • Can you post the full XML of the event please?
    Wednesday, December 26, 2012 7:44 PM
  • Hi Adam,


    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="49152">10009</EventID>
    <TimeCreated SystemTime="2012-12-26T18:47:21.000000000Z" />
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Security />
    - <EventData>
    <Data Name="param1">SCCM.UNTRUSTEDDOMAIN.LOCAL</Data>


    • Edited by HUNAL Wednesday, December 26, 2012 7:51 PM
    Wednesday, December 26, 2012 7:47 PM
  • Does anybody have an idea about that issue?
    Thursday, January 3, 2013 6:35 PM
  • Hi Hunal,

    I am experiencing the same problems as you are describing. Did you find a resolution in the mean-time? If so, could you please share it with me?



    Tuesday, March 19, 2013 11:39 AM
  • Hi Marco,

    Unfortunately I couldn't find the resolution, still encountering the same problem.


    Tuesday, March 19, 2013 2:48 PM
  • Hi,

    I am experiencing same problem found this article http://blogs.msdn.com/b/asiatech/archive/2010/03/16/how-to-troubleshoot-dcom-10009-error-logged-in-system-event.aspx and tried DTCPing http://support.microsoft.com/kb/918331/en-us it ends with:

    -->RPC reverse BIND failed

    -->1722(The RPC server is unavailable.)

    Required FW ports are opened :-( Could you please try start DTCPing on your site just to compare results.

    Thanks and regards,


    Thursday, April 4, 2013 1:59 PM