Home
  •  

User Services - RPC Access denied response received from remote server.

User_Services___RPC_Access_denied_response_received_from_remote_server._1_7_Rule (Rule)

Knowledge Base article:

Management Pack
Summary
RPC Access denied response received from remote server.
 
Resolutions
If this error persists despite servers running under the same group account then this might point to Kerberos failures.
 
© 2001-2005 Microsoft, all rights reserved.

Element properties:

TargetMicrosoft.Office.LiveCommunicationsServer.2005.Microsoft_Office_Live_Communications_Server_2005_Enterprise_Edition_Installation
CategoryEventCollection
EnabledTrue
Event_ID30957
Event SourceLive Communications User Services
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityLow
RemotableTrue
Alert Message
User Services - RPC Access denied response received from remote server.

$Data/EventDescription$
Event LogApplication
CommentMom2005ID='{BD35C8C4-688C-4418-A58B-724F0EFEC8C3}';MOM2005ComputerGroupID={CFD63B0C-55F0-407D-91B4-EE48A4AAA89A}

Member Modules:

ID Module Type TypeId RunAs 
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="User_Services___RPC_Access_denied_response_received_from_remote_server._1_7_Rule" Target="Microsoft.Office.LiveCommunicationsServer.2005.Microsoft_Office_Live_Communications_Server_2005_Enterprise_Edition_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{BD35C8C4-688C-4418-A58B-724F0EFEC8C3}';MOM2005ComputerGroupID={CFD63B0C-55F0-407D-91B4-EE48A4AAA89A}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" Comment="{F6DA1507-12AF-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>30957</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Live Communications User Services</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/EventDescription$

          </Description>

        <AlertLevel>30</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>User Services - RPC Access denied response received from remote server.</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>