Check Windows Firewall settings and network connectivity

Microsoft.MSDTC.10.0.Eventcollection.4358.4359 (Rule)

Knowledge Base article:

Summary

Ensure that the computers can communicate with each other by confirming network connectivity. Confirm that firewall settings for the Microsoft Distributed Transaction Coordinator (MS DTC) allow network communication over the appropriate port.

Causes

Firewall settings block network communication for MSDTC.

Resolutions

To perform these procedures, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To confirm network connectivity:

To confirm that MS DTC firewall settings allow network communication over the appropriate port:

Element properties:

TargetMicrosoft.MSDTC.10.0.Servers
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
Check Windows Firewall settings and network connectivity alert
Check Windows Firewall settings and network connectivity alert
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
ScriptProble DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="Microsoft.MSDTC.10.0.Eventcollection.4358.4359" Enabled="onStandardMonitoring" Target="Microsoft.MSDTC.10.0.Servers" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="ScriptProble" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>^(4358|4359)$</Pattern>
</RegExExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>^(Microsoft-Windows-MSDTC|Microsoft-Windows-MSDTC Client)$</Pattern>
</RegExExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="Alert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertName/>
<AlertDescription/>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="Microsoft.MSDTC.10.0.Eventcollection.4358.4359.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue>$Data/LoggingComputer$</SuppressionValue>
</Suppression>
<Custom1/>
<Custom2/>
<Custom3/>
<Custom4/>
<Custom5/>
<Custom6/>
<Custom7/>
<Custom8/>
<Custom9/>
<Custom10/>
</WriteAction>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>