error 5719 - RPC unavailable

[zoec]

My Windows 2000 server (sp3) is a member server of a NT4-
based domain. For the past few days, it's been getting
this error:
"No Windows NT or Windows 2000 controller available. The
following error occured: The RPC server is unavailable."

I've looked at KB on Error 5719 and 'RPC server is
unavailable' but performed the steps suggested but they do
seem to help. I even updated my NIC driver and replaced
the RJ45 cable to ensure it was a hardware factor. The
Win2000 server can ping the domain controller and the
clients have no trouble accessing its shared printers.
All help is greatly appreciated.

 

[Steve Duff [MVP]]

Are you absolutely, positively, 100% SURE you
don't have the Blaster worm or some related variant?

This is exactly the sort of problem you see on
infected systems, and like a bad social disease
it can return after you're sure you've rid yourself
of it.

Steve Duff, MCSE
Ergodic Systems, Inc.

 

[zoec]

I have the McAFee DAT updated all the time and scanned and
never found a virus. Is there other symptoms that I should
be looking for?

THanks again.

 

[Steve Duff [MVP]]

No, if you're sure your systems are clean, they're clean --
at the present time it is simpy the first question to ask when
RPC errors start showing up.

Eliminating the various Blaster-like worms,
in a mixed-mode domain the most likely cause of this
error is a dead or broken trust. So check the trust
database for any trusts for systems that no longer exist,
trusts that aren't working correctly, incorrectly configured etc.
Do this on all DCs.

Network and TCP/IP problems are the other likely cause of
an inability to contact the DC. So ask yourself if you are having any
other odd network or communication issues as they may be related.

There are a number of other causes that have been listed
in the MS KB -- ones I've never personally run in to.
If you search the KB for "event 5719" you'll should get
all of them.

You can try simply unjoining and rejoining the domain. That
will sometimes clear this up, and it is reasonably simple to do.
But before doing that, make sure you understand what is involved,
and have current backups of the system at hand.

Steve Duff, MCSE
Ergodic Systems, Inc.

 

[Marina Roos]

Open Taskmanager and look for the msblast.exe- or mspatch.exe or
teekids-proces. Kill it and go to www.sophos.com to get the removaltool.
After that install ms03-026 from microsoft to prevent from happening again.

Marina