none
WMI and RPC connectivity Errors

    Question

  • There is a domain controller that WMI appears to work locally but cannot be connected to remotely with Computer Managment or wbemtest.  When connecting with wbemtest, the error message indicated that "the RPC server is unavailable".  

    Connecting to shares works without a problem.  The windows firewall is turned off.  All necessary services are started and appear to be functioning. 

    There are events in the event log that were created in System and Application.  The events are as follows.  In the system log then event is: 

    Event ID: 10027 
    Source: DCOM 
    Description: The machine wide limit settings do not grant Remote Activation permission for COM Server applications to the user NT AUTHORITY\ANONYMOUS LOGON SID (S-1-5-7).  This security permission can be modified using the Componenet Services administrative tool.

    Event ID: 10018 
    Source: COM
    Description: The application-specific permission settings do not grant Local access permission to the COM Server applicaiton C:\Windows\System32\svchost.exe to the user NT AUTHORITY\ANONYMOUS LOGON SID (S-1-5-7).  The application set this security permission programmatically; to modify this security permision contact the application vendor.

    We have attempted to modify the permissions and add the Anonymous user to the DCOM settings within dcomcnfg.  This has not shown any success.

    Lastly there are errors within C:\Windows\System32\wbem\logs\wbemcore.log

    (Mon Jun 29 11:15:29 2009.520046) : Error 8004100c occured executing request for MSiSCSI_HBAInformation
    (Mon Jun 29 11:15:29 2009.520046) : Error 80041002 occured executing request for CancelProvAsyncCall for sink 000A0280
    (Mon Jun 29 11:15:29 2009.520046) : CAsyncReq_CancelProvAsyncCall call failed
    (Mon Jun 29 11:15:39 2009.530281) : CALL ConnectionLogin::NTLMLogin
       wszNetworkResource = \\.\root\wmi
       pPreferredLocale = (null)
       lFlags = 0x0
    (Mon Jun 29 11:15:39 2009.530281) : DCOM connection from NT AUTHORITY\SYSTEM at authentiction level Privacy, AuthnSvc = 10, AuthzSvc = 0, Capabilities = 0
    (Mon Jun 29 11:15:39 2009.530281) : GetUserDefaultLCID failed, restorting to system verion(Mon Jun 29 11:15:39 2009.530296) : 

    Any help would be appreciated.

    Thanks.
    Monday, June 29, 2009 3:18 PM

Answers

  • Hi,

    Please try the suggestions in article below for troubleshooting.

    http://support.microsoft.com/kb/899965

    Thanks.

    This posting is provided "AS IS" with no warranties, and confers no rights.
    • Marked as answer by NickEw Wednesday, July 22, 2009 6:06 PM
    • Unmarked as answer by NickEw Wednesday, July 22, 2009 6:06 PM
    • Marked as answer by NickEw Wednesday, July 22, 2009 6:08 PM
    • Unmarked as answer by NickEw Thursday, July 23, 2009 3:33 PM
    • Marked as answer by Sainath IRP_MJ_CREATEMVP, Moderator Saturday, January 22, 2011 3:51 AM
    Thursday, July 09, 2009 2:56 AM
    Moderator

All replies

  • Hi,

    Let’s try the steps below to narrow down the cause of this problem.

    1.    Could you connect to any other server or client in your environment using wbemtest?
    2.    Test in Clean Boot. Boot both server and client in to Clean boot:

    a. Click Start, type "msconfig", press Enter.
    b.Switch to Services tab, click Hide all Microsoft services, click Disable all.
    c. Switch to Startup tab, click Disable All. Click OK to restart and test.

    What’s the result? If the error persists, please help to collect the following information for research.

    a.    Download proper MPS Report tool from the website below.

    Microsoft Product Support Reports
    http://www.microsoft.com/downloads/details.aspx?FamilyID=CEBF3C7C-7CA5-408F-88B7-F9C79B7306C0&displaylang=en

    b.    Double-click to run it, if requirement is not met, please follow the wizard to download and install them. After that, click Next, when the "Select the diagnostics you want to run" page appears, select "General", and Internet and Networking, click Next.

    c.    After collecting all log files, choose "Save the results", choose a folder to save <Computername>MPSReports.cab file. Please use Windows Live SkyDrive (http://www.skydrive.live.com/) to upload the file and then give us the download address.

    Thanks.

    This posting is provided "AS IS" with no warranties, and confers no rights.
    • Marked as answer by Mervyn ZhangModerator Monday, July 06, 2009 2:13 AM
    • Unmarked as answer by NickEw Wednesday, July 22, 2009 6:06 PM
    Thursday, July 02, 2009 2:12 AM
    Moderator
  • Hi,

    Please try the suggestions in article below for troubleshooting.

    http://support.microsoft.com/kb/899965

    Thanks.

    This posting is provided "AS IS" with no warranties, and confers no rights.
    • Marked as answer by NickEw Wednesday, July 22, 2009 6:06 PM
    • Unmarked as answer by NickEw Wednesday, July 22, 2009 6:06 PM
    • Marked as answer by NickEw Wednesday, July 22, 2009 6:08 PM
    • Unmarked as answer by NickEw Thursday, July 23, 2009 3:33 PM
    • Marked as answer by Sainath IRP_MJ_CREATEMVP, Moderator Saturday, January 22, 2011 3:51 AM
    Thursday, July 09, 2009 2:56 AM
    Moderator