Server access-denied response received when sending a presence notification to a remote server

Microsoft.LS.2010.Monitoring.UnitMonitor.TimerResetEvent.PresenceFocus_ES_W_RPC_SERVER_ACCESS_DENIED (UnitMonitor)

Knowledge Base article:

Summary

The server has returned RPC Access Denied responses.

Causes

More likely cause is that Enterprise Edition Servers are not running under the same group account.

Resolutions

Ensure normal activity or that connecting Enterprise Edition Servers are running under the same group account as this server.

Element properties:

Target

Microsoft.LS.2010.Component.PresenceFocus

Parent Monitor

System.Health.AvailabilityState

Category

AvailabilityHealth

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.RepeatedEventLogTimer2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

The server has returned RPC Access Denied responses.

{0}

Please see the 'Product Knowledge' and the 'Alert Context' tab on Alert Properties view for more information.

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.LS.2010.Monitoring.UnitMonitor.TimerResetEvent.PresenceFocus_ES_W_RPC_SERVER_ACCESS_DENIED" Accessibility="Public" Enabled="true" Target="Microsoft.LS.2010.Component.PresenceFocus" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.RepeatedEventLogTimer2StateMonitorType" ConfirmDelivery="true">

  <Category>AvailabilityHealth</Category>

  <AlertSettings AlertMessage="Alert_The_server_has_returned_RPC_Access_Denied_responses.">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/Context/DataItem/EventDescription$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="Microsoft.LS.2010.Monitoring.UnitMonitor.TimerResetEvent.PresenceFocus_ES_W_RPC_SERVER_ACCESS_DENIED.Error" MonitorTypeStateID="RepeatedEventRaised" HealthState="Error"/>

    <OperationalState ID="Microsoft.LS.2010.Monitoring.UnitMonitor.TimerResetEvent.PresenceFocus_ES_W_RPC_SERVER_ACCESS_DENIED.Success" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <RepeatedComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</RepeatedComputerName>

    <RepeatedLogName>Lync Server</RepeatedLogName>

    <RepeatedExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">30959</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">LS User Services</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </RepeatedExpression>

    <Consolidator>

      <ConsolidationProperties/>

      <TimeControl>

        <WithinTimeSchedule>

          <Interval>1800</Interval>

        </WithinTimeSchedule>

      </TimeControl>

      <CountingCondition>

        <Count>10</Count>

        <CountMode>OnNewItemTestOutputRestart_OnTimerSlideByOne</CountMode>

      </CountingCondition>

    </Consolidator>

    <TimerWaitInSeconds>3600</TimerWaitInSeconds>

  </Configuration>

</UnitMonitor>