RPC connection problem with WMI

[mklomp]

Hello,

i have a connection problem with WMI. and it's a RPC connection
problem.

i have 4 clients, 2 have the problem and 2 don't.

10.31.3.248 and 10.31.3.165 are the clients with a problem. 10.31.3.243
and 10.31.3.249 haven't any problem.

if i use any wmi script, i've got the following problem.

From To

10.31.3.165 --> 10.31.3.243 error: 0
10.31.3.165 --> 10.31.3.248 error: 462
10.31.3.165 --> 10.31.3.249 error: 0
10.31.3.248 --> 10.31.3.165 error: 462
10.31.3.248 --> 10.31.3.243 error: 0
10.31.3.248 --> 10.31.3.249 error: 0
10.31.3.243 --> 10.31.3.249 error: 0
10.31.3.243 --> 10.31.3.248 error: 462
10.31.3.243 --> 10.31.3.165 error: 462

the problem occurs only by incoming connections on the problem clients.
outgoing connections on this clients has no problems.

i have checked the 4 client for firewall software and for the ICF
settings. and there is no firewall software installed and the ICF is
not enabled. the clients are connected to the same switch. this switch
don't use packetfiltering.

i have also used rpcping to test the connection(from client 10.31.3.165
to client
10.31.3.248 and 10.31.3.243). here are the results.

D:\rk2003>D:\rk2003\rpcping.exe -s 10.31.3.248 -t ncacn_np
Completed 1 calls in 10 ms
100 T/S or 10.000 ms/T

D:\rk2003>D:\rk2003\rpcping.exe -s 10.31.3.248 -t ncacn_http
Exception 1722 (0x000006BA)

D:\rk2003>D:\rk2003\rpcping.exe -s 10.31.3.248 -t ncacn_ip_tcp
Exception 1722 (0x000006BA)
Number of records is: 3
ProcessID is 2968
System Time is: 6/11/2004 8:49:10:746
Generating component is 8
Status is 1722
Detection location is 313
Flags is 0
NumberOfParameters is 0
ProcessID is 2968
System Time is: 6/11/2004 8:49:10:746
Generating component is 8
Status is 10061
Detection location is 311
Flags is 0
NumberOfParameters is 3
Long val: 135
Pointer val: 0
Pointer val: 0
ProcessID is 2968
System Time is: 6/11/2004 8:49:10:746
Generating component is 8
Status is 10061
Detection location is 318
Flags is 0
NumberOfParameters is 0

D:\rk2003>D:\rk2003\rpcping.exe -s 10.31.3.243 -t ncacn_ip_tcp
Completed 1 calls in 60 ms
16 T/S or 60.000 ms/T

if i try to connect to this client with wbemtest.exe, i get the
following error.

Number: 0x800706ba
Facility: Win32
Description: The RPC server is unavailable.

it make no difference when i use the host name inplace of the ip
adress. in one of the microsoft newsgroups i found the next
testprogram, DCOMtest.exe. with this program i have the same problem. i
can't connect with this client. i get the following error.

D:\rk2003>C:\temp\TstClnt.exe 10.31.3.248
Client: Creating Instance...0.9419 seconds
Client: CoCreateInstanceEx: The RPC server is unavailable.
(800706ba)
Client: Done

i do this with a account that has Domain admin rights. i compare the
wmi rights from this client with a correct client and they are the
same, i also compare the registry settings for rpc
(HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Rpc/DCOM_Protocols) and they are
the same. i can connect remotely to the registry and the admin
share.
i can also connect with computermanagement to the client, but when i
try to connect to wmi i get the following error.

Failed to connect to \\10.31.3.248
because "Win32: The RPC server is unavailable."

i has set verbose logging for wmi, and i get the following error im my
event log.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10009
Date: 10-6-2004
Time: 9:33:49
User: EXELBXAD\support10
Computer: NLLC3935302622
Description:
DCOM was unable to communicate with the computer 10.31.3.248 using any
of the configured protocols.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

all clients run Windows XP Pro with Service Pack 1.

I have run: c:\>reg add "\\Machine\hklm\Software\Microsoft\OLE" /v
EnableDCOM /t REG_SZ
/d "Y" /f
to be sure that DCOM is enabled.

and i have run Netstat -nao and all clients are listening to the RPC
port.

thanks,

Michel Klomp
Sylis Nederland