Home
  •  

A remote procedure call (RPC) communications error occurred. Unable to unbind over RPC.

A_remote_procedure_call__RPC__communications_error_occurred__Unable_to_unbind_over_RPC (Rule)

Knowledge Base article:

Summary

The message transfer agent (MTA) made a remote procedure call (RPC) system Unbind call to the operating system that failed. As a result, the connection cannot close properly.

Resolutions

At the command prompt, use the Net Helpmsg command to determine the reason for the Windows error.

In Control Panel, double-click the Administrative Tools icon, double-click the Services icon, and then verify that the Remote Procedure Call (RPC) service is running.

Use Network Monitor to capture network traces, then view these traces from Network Monitor for any network issue.

If the error persists, double-click the Administrative Tools icon in Control Panel. Double-click the Services icon, and then stop and restart the Microsoft Exchange MTA Stacks service. If the error persists, restart Microsoft Exchange Server.

External

For more information about MSExchangeMTA event 9319, see:

Element properties:

TargetMicrosoft.Exchange.Routing.MTA
CategoryEventCollection
EnabledTrue
Event_ID9319
Event SourceMSExchangeMTA
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
A remote procedure call (RPC) communications error occurred. Unable to unbind over RPC.
{0}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
EventDS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="A_remote_procedure_call__RPC__communications_error_occurred__Unable_to_unbind_over_RPC" Enabled="onEssentialMonitoring" Target="Exch2003Core!Microsoft.Exchange.Routing.MTA" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>Channel</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Application</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>MSExchangeMTA</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>9319</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertOwner>$Data/PublisherName$</AlertOwner>

      <AlertMessageId>$MPElement[Name="A_remote_procedure_call__RPC__communications_error_occurred__Unable_to_unbind_over_RPC.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>