惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

H
Help Net Security
博客园 - Franky
GbyAI
GbyAI
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
爱范儿
爱范儿
IT之家
IT之家
酷 壳 – CoolShell
酷 壳 – CoolShell
aimingoo的专栏
aimingoo的专栏
博客园_首页
MongoDB | Blog
MongoDB | Blog
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
Recent Announcements
Recent Announcements
Scott Helme
Scott Helme
有赞技术团队
有赞技术团队
M
MIT News - Artificial intelligence
C
CERT Recently Published Vulnerability Notes
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
Jina AI
Jina AI
F
Fortinet All Blogs
N
Netflix TechBlog - Medium
L
LangChain Blog
L
LINUX DO - 最新话题
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
H
Hacker News: Front Page
MyScale Blog
MyScale Blog
P
Palo Alto Networks Blog
G
Google Developers Blog
Google DeepMind News
Google DeepMind News
AI
AI
T
Troy Hunt's Blog
Microsoft Azure Blog
Microsoft Azure Blog
阮一峰的网络日志
阮一峰的网络日志
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
Vercel News
Vercel News
Microsoft Security Blog
Microsoft Security Blog
罗磊的独立博客
S
Secure Thoughts
大猫的无限游戏
大猫的无限游戏
博客园 - 叶小钗
人人都是产品经理
人人都是产品经理
Blog — PlanetScale
Blog — PlanetScale
博客园 - 司徒正美
Apple Machine Learning Research
Apple Machine Learning Research
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
博客园 - 三生石上(FineUI控件)
S
Security @ Cisco Blogs
Cloudbric
Cloudbric
E
Exploit-DB.com RSS Feed
Attack and Defense Labs
Attack and Defense Labs

博客园 - 咖啡的滋味

【转】Vmware ESX 3.0出现“error connecting: can not connect to host x.x.x.x: a connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed……的解决方法 安装isa2006后加入域提示“RPC服务器不可用” Exchange 2007 安装完后需要注意的几件事情 Exchange server 2007环境下,outlook2007同步脱机地址簿时出现“0x80190194”错误的分析与解决方法 在Exchange server 2007中启用pop3和IMAP4协议访问 Exchange server 2007 出现“0x8004010F”错误的解决办法 - 咖啡的滋味 Exchange Server 2007 LCR小试 学习Exchange的几个站点 Exchange server2007自动发现服务(Auto discover service)原理及调试 有感 重置TCP/IP协议堆栈的经历 喜欢济南的几个理由 网通电信双线路上网,网通的走网通线路,电信的走电信线路,内网通过NAT上网,双线路故障自动切换 Ten sentences 在OUTLOOK或OWA中查看邮件的SCL级别(转) 常用的RBL服务器列表及介绍 关于在使用Exchange2003系统时无法向sina,yahoo,hotmail等邮箱发送邮件问题的解决方法 关于在配置ISA 的WEB代理时使用的身份验证问题 在启用sharepoint portal server 2003的SSO时,提示“无法连接到数据库服务器,请检查配置账户的权利”的问题的解决方法
安装ISA2004后,加入域时提示:"远程过程调用失败且未运行"的解决办法
咖啡的滋味 · 2006-12-01 · via 博客园 - 咖啡的滋味

简单的说就是在工作组的环境下,在windows 2003 server w/sp1上安装ISA2004后,把此服务器加入域时提示"远程过程调用失败且未运行"的错误信息.解决方法:先安装ISA2004的sp1,然后加入域OK.

微软对于此问题的解释和解决方法:

Error message in a Windows Server 2003-based domain or in a Windows 2000 Server-based domain: "The remote procedure call failed and did not run"

SUMMARY

This article describes how to troubleshoot the error messages that you may receive when a remote procedure call (RPC) fails in a Microsoft Windows Server 2003-based domain or in a Microsoft Windows 2000 Server-based domain. This article includes possible causes and information to help you work around this problem.

SYMPTOMS

When a remote procedure call (RPC) fails in a Microsoft Windows Server 2003-based domain or in a Microsoft Windows 2000 Server-based domain, you may receive one or more of the following error messages:

You receive the following error message when the RPC service can connect to port 135, but subsequent RPC calls fail:

The remote procedure call failed and did not run

The Active Directory directory service replication logs an event that similar to the following event in the Directory Service log:

Event Type: Warning
Event Source: NTDS Replication
Event Category: DS RPC Client
Event ID: 1232
Date:
MM/DD/YYYY
Time:
HH:MM:SS AM|PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer:
Computer_Name
Description:
Active Directory attempted to perform a remote procedure call (RPC) to the following server. The call timed out and was cancelled.

Server:

GUID._msdcs.example.com
Call Timeout (Mins): 5
Thread ID: 984

Additional Data: Internal ID: 5000a96

For more information, see Help and Support Center at http://support.microsoft.com.

When you run the Domain Controller Diagnostic Tool (Dcdiag.exe) or the repadmin /showreps command, the output may include the following error message:

The replication generated an error (1727): The remote procedure call failed and did not execute.

Additionally, the Active Directory Knowledge Consistency Checker (KCC) process may fail. When the KCC process fails, the following events are logged in the Directory Service log:

Event message 1

Event Type: Warning
Event Source: NTDS KCC
Event Category: Knowledge Consistency Checker
Event ID: 1925
Date:
MM/DD/YYYY
Time:
HH:MM:SS AM|PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer:
Computer_Name
Description:
The attempt to establish a replication link for the following writable directory partition failed.

Directory partition: DC=

Computer_Name,DC=Domain_Name,DC=com
Source domain controller: CN=NTDS Settings,CN=
DomainController_Name,CN=Server_Name,CN=site01,CN=Sites ,CN=Configuration,DC=cas,DC=net Source domain controller address: GUID._msdcs.example.com Intersite transport (if any): CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=Domain_Name,DC=com

This domain controller will be unable to replicate with the source domain controller until this problem is corrected.

User Action: Verify if the source domain controller is accessible or network connectivity is available.

Additional Data: Error value: 1727 The remote procedure call failed and did not execute.

Event message 2

Event Type: Warning
Event Source: NTDS KCC
Event Category: Knowledge Consistency Checker
Event ID: 1265
Date:
MM/DD/YYYY
Time:
HH:MM:SS AM|PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer:
Computer_Name
Description:
The attempt to establish a replication link with parameters Partition: DC=
Computer_Name,DC=Domain_Name,DC=comSource DSA DN: CN=NTDS Settings,CN=DomainController_Name,CN=Server_Name,CN=site01,CN=Sites,CN=Configuration ,DC=domain,DC=com
Source DSA Address:
GUID._msdcs.example.com Inter-site Transport (if any): CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=Domain_Name,DC=com failed with the following status:

The remote procedure call failed and did not execute.

The record data is the status code. This operation will be retried.

Additionally, an event that resembles the following may be logged in the System log:

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date:
MM/DD/YYYY
Time:
HH:MM:SS AM|PM
User: N/A
Computer:
Computer_Name
Description:
This computer was not able to set up a secure session with a domain controller in domain
Domain_Name due to the following:
The remote procedure call failed and did not execute.

This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.

CAUSE

Cause 1

The RPC failure that is reported in error 1727 may occur because RPC needs a port that is blocked. Faulty packets, port filtering, and firewall rules may block a port when the firewall or the network router is configured incorrectly.

Error 1727 indicates that the local domain controller cannot reach the replication RPC process of a replication partner domain controller. At the same time, the domain controller can reach its end-point mapper. If the domain controller cannot reach its end-point mapper, you receive the following error message:

RPC Server is unavailable

Note The universally unique identifier (UUID) for the replication RPC process is E3514235-4B06-11D1-AB04-00C04FC2DCD2.

Cause 2

The RPC failure may occur because Windows Server 2003 Service Pack 1 adds a new RPC element. This new RPC element is known as "multiple transfer syntax negotiation." With multiple transfer syntax negotiation, the clients and the servers can discover and can negotiate their capabilities during the bind time instead of during the first request in the verification trailer.

However, some firewalls, some routers, and some virtual private networks (VPNs) may not recognize this change to the RPC protocol. If the frames are not recognized, the routers, the firewalls, and the VPN connections drop the new RPC Bind request frames. Therefore, any operation that requires an RPC Bind request may now fail if the RPC caller is a Windows Server 2003 Service Pack 1-based server.

The following products may experience this issue:

Microsoft Internet Security and Acceleration (ISA) Server 2004

ISA Server 2000

Products from Check Point Software Technologies

Products from WatchGuard Technologies

WORKAROUND

To work around the RPC failure, use one of the following methods.

Method 1: Troubleshoot cause 1

Review the event log for related error messages

If any events are logged for the RPC failure, review the event logs of the replication partner for related error messages. If the domain controllers in the domain are separated by a firewall, the firewall may be blocking the dynamic ports that are used for Active Directory replication. By default, these dynamic ports start with 1024.

Verify the RPC connectivity by capturing network traffic

To verify the RPC connectivity, follow these steps to capture network traffic:

1.

Capture a network trace on both replication partner domain controllers at the same time.

2.

Try to synchronize replication from one of the domain controllers.

3.

Verify that the replication initiator sends the RPC Bind request on the replication RPC process.

4.

Verify that the RPC Bind request arrives at the replication partner subnet.

5.

Verify that the replication partner sends the RPC Bind Ack answer to the replication partner subnet.

If one of these frames is not sent to the replication partner subnet, check the configuration of the firewall.

Method 2: Troubleshoot cause 2

ISA Server

If the computer is running ISA Server 2004 Standard Edition or ISA Server 2000, the ISA Server RPC filter may block the RPC-based operations. For more information about how to work around this problem, click the following article number to view the article in the Microsoft Knowledge Base:

887222 (http://support.microsoft.com/kb/887222/) The ISA Server RPC filter blocks RPC traffic after Windows Server 2003 Service Pack 1 is installed on a computer that is running ISA Server 2004 or ISA Server 2000

Firewall product or VPN product

If the RPC-based operations fail across a VPN or across a firewall immediately after you install Windows Server 2003 Service Pack 1, contact the firewall vendor or the VPN vendor to see whether an updated RPC filter is available. For information about how to contact the firewall vendor or the VPN vendor, click the appropriate article number in the following list to view the article in the Microsoft Knowledge Base:

65416 (http://support.microsoft.com/kb/65416/) Hardware and software vendor contact information, A-K

60781

(http://support.microsoft.com/kb/60781/) Hardware and software vendor contact information, L-P

60782

(http://support.microsoft.com/kb/60782/) Hardware and software vendor contact information, Q-Z


For more information about how to work around this problem, click the following article number to view the article in the Microsoft Knowledge Base:

899148 (http://support.microsoft.com/kb/899148/) Some firewalls may reject network traffic that originates from Windows Server 2003 Service Pack 1-based computers

If the RPC-based operations are blocked by filters on a Check Point Software Technologies product, see Check Point Software Secure Knowledge article SK30784, or visit the following Check Point Software Technologies Web site:

http://www.checkpoint.com (http://www.checkpoint.com)

The information and the solution in this document represents the current view of Microsoft Corporation on these issues as of the date of publication. This solution is available through Microsoft or through a third-party provider. Microsoft does not specifically recommend any third-party provider or third-party solution that this article might describe. There might also be other third-party providers or third-party solutions that this article does not describe. Because Microsoft must respond to changing market conditions, this information should not be interpreted to be a commitment by Microsoft. Microsoft cannot guarantee or endorse the accuracy of any information or of any solution that is presented by Microsoft or by any mentioned third-party provider.

Microsoft makes no warranties and excludes all representations, warranties, and conditions whether express, implied, or statutory. These include but are not limited to representations, warranties, or conditions of title, non-infringement, satisfactory condition, merchantability, and fitness for a particular purpose, with regard to any service, solution, product, or any other materials or information. In no event will Microsoft be liable for any third-party solution that this article mentions.

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.