Exchangemaster GmbH company logo

Exchangemaster GmbH - A Swiss IT Consultancy
Services
References
Partners
Contact
Getting Started
FAQs
Presentations
Articles
Community
Search
Popular
Tell-a-Friend
Follow Me

Follow exchangemaster on Twitter

Who's Online
We have 61 guests online
Syndicate
FAQ 000109 - Group Policy Results Wizard fails with error RPC server is unavailalbe PDF Print E-mail
User Rating: / 58
PoorBest 
Written by Dejan Foro   
May 25, 2013 at 12:29 AM

This article applies to:

Windows Server 2008 R2

 

PROBLEM

When you try to run Group Policy Results Wizard from the Group Policy Management Tool against a remote computer it fails with the following error:


Failed to connect to DOMAIN\SERVER due to error listed below. Ensure that the Windows Management Instrumentation (WMI) service is enabled and consult the event log for target computer for future details. 

Details:

The RPC server is unavailable

 

There are multiple possible causes for this behaviour:

 

CAUSE 1

Firewall blocking RPC traffic.

 

SOLUTION

On the firewall allow TCP ports 135 and 445

 

If you are using Windows firewall on the machines, you need to enable Remote Administration exception on the Windows firewall.

 

For multiple machines, this setting can be controllerd via the following Group Policy setting:

 

Computer Configuration

Policies

Administrative Templates

Network

Network Connections

Windows Firewall

Domain Profile

Windows Firewall: Allow remote administration exception

 

 

CAUSE 2

Remote Procedure Call (RPC) service or dependent services are not running

 

SOLUTION 2

Make sure the following services are running:

- Rempote Procedure Call (RPC)

- TCP/IP Netbios helper

- Remote Registry Service

- Windows Management Instrumentation (WMI) service  

 

 

CAUSE 3

The RPC service on the Certification Authority server did not register itself properly in Active Directory (the SPN recoord is missing).

 

SOLUTION 3

To check if the RPC service has registered itself properly, on the CA server run the following 2 commands:

     setspn.exe -L SERVERNAME

 

Your should have  2 entries like following:

     RPCSS/YOURSERVER

     RPCSS/YOURSERVER.YOURDOMAIN.COM

 

In case those are missing you can manually set them by running the following command

     setspn -A RPCSS/YOURSERVER YOURSERVER

     setspn -A RPCSS/YOURSERVER.YOURDOMAIN.COM YOURSERVER

Last Updated ( Apr 02, 2015 at 02:45 AM )
<Previous   Next>