An error occurred while the Microsoft Single Sign-On (SSOSrv) service attempted to call the Remote Procedure Call (RPC) service.
This alert indicates that an error occurred while the Microsoft Single Sign-On (SSOSrv) service attempted to call the Remote Procedure Call (RPC) service.
An unauthorized user may have attempted to access the Single Sign-On database.
Do the following:
Ensure that the Remote Procedure Call (RPC) service is running.
If the problem persists, stop and then restart the Remote Procedure Call (RPC) service, and then restart Internet Information Services (IIS) Manager.
For information about configuring Microsoft Single Sign-On, see the Microsoft Office SharePoint Server 2007 online documentation.
Target | Microsoft.Office.Sharepoint.Server.2007.MOSS.Application | ||
Category | EventCollection | ||
Enabled | True | ||
Event_ID | 1010 | ||
Event Source | Office SharePoint Server | ||
Alert Generate | True | ||
Alert Severity | Warning | ||
Alert Priority | Normal | ||
Remotable | True | ||
Alert Message |
| ||
Event Log | Application |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.EventProvider | Default |
CollectData | WriteAction | Microsoft.SystemCenter.CollectEvent | Default |
DataWarehousePublishData | WriteAction | Microsoft.SystemCenter.DataWarehouse.PublishEventData | Default |
MOSS.GenerateAlert | WriteAction | System.Health.GenerateAlert | Default |
<Rule ID="Microsoft.Office.Sharepoint.Server.2007.Remote_Procedure_Call_service_failed_to_stop" Enabled="onEssentialMonitoring" Target="Microsoft.Office.Sharepoint.Server.2007.MOSS.Application" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="MSWL!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="MSWL!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>1010</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Office SharePoint Server</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="CollectData" TypeID="SystemCenter!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="DataWarehousePublishData" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
<WriteAction ID="MOSS.GenerateAlert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Office.Sharepoint.Server.2007.Remote_Procedure_Call_service_failed_to_stop.AlertMessageID"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDisplayNumber$</AlertParameter1>
<AlertParameter2>$Data/EventDescription$</AlertParameter2>
<AlertParameter3>$Data/PublisherName$</AlertParameter3>
<AlertParameter4>$Target/Host/Property[Type="MSWL!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter4>
</AlertParameters>
<Suppression>
<SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>
<SuppressionValue>$Data/PublisherName$</SuppressionValue>
<SuppressionValue>$Data/LoggingComputer$</SuppressionValue>
<SuppressionValue>$Data/EventDescription$</SuppressionValue>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>