RPC registration failure monitor.

Microsoft.Windows.DfsReplication.RPCRegistrationFailureMonitor (UnitMonitor)

This monitor checks whether the DFS Replication service on the monitored computer was able to register with the RPC subsystem.

Knowledge Base article:

Summary

When the DFS Replication service starts up, it needs to register with the Windows RPC subsystem so that it can communicate with other replication partners. This event may be registered if the service failed to do so. Consequently, the service will be unable to start on the affected computer. The Service Control Manager will automatically attempt to restart the service after a few minutes.

Event: 1208

Anti-event: 1210, 1004

Causes

This error condition may be caused if the machine is running low on available memory or if the RPC service has not been started. It may also be caused if a firewall setting is preventing the DFS Replication service from binding to its desired port.

Resolutions

Restart the DFS Replication service.

To do so in the Operations console, click Start DFS Replication service. To do so from a command prompt, open a command prompt window and then type the following command: net start dfsr

To verify that the DFS Replication service is running from the Operations console, click DFS Replication service Status.

Additional

If restarting the service does not resolve the issue, check the following items:

There is sufficient memory available on the computer to start the DFS Replication service.
The RPC service has been started on the affected computer.
The firewall is not blocking RPC and DFS Replication services on the affected computer.

For more information, see http://go.microsoft.com/fwlink/?LinkId=52847

Element properties:

Target

Microsoft.Windows.DfsReplication.Service

Parent Monitor

System.Health.AvailabilityState

Category

StateCollection

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.2SingleEventLog2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

DFS Replication service was unable to start an RPC listener

The DFS Replication service failed to start an RPC listener. Replication is
disabled on this machine. This event can be caused by low memory issues. Additional Information: Port: {0} Error: {1} ( {2} )

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.Windows.DfsReplication.RPCRegistrationFailureMonitor" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.DfsReplication.Service" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">

  <Category>StateCollection</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.DfsReplication.RPCRegistrationFailureMonitor_AlertMessageResourceID">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/Params/Param[1]$</AlertParameter1>

      <AlertParameter2>$Data/Context/Params/Param[2]$</AlertParameter2>

      <AlertParameter3>$Data/Context/Params/Param[3]$</AlertParameter3>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="FirstEventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

    <OperationalState ID="SecondEventRaised" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>

    <FirstLogName>DFS Replication</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">1208</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">DFSR</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>

    <SecondLogName>DFS Replication</SecondLogName>

    <SecondExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">DFSR</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <Or>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">1210</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">1004</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </Or>

        </Expression>

      </And>

    </SecondExpression>

  </Configuration>

</UnitMonitor>