Welcome to ISAserver.org

RPC connections failed

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> RPC connections failed

Page: [1] 2 next > >>

Message

<< Older Topic Newer Topic >>

RPC connections failed - 5.Oct.2007 6:00:09 AM

frankbeerten

Posts: 6
Joined: 22.Feb.2006
Status: offline

We have ISA server 2006 on Windows 2003 SP2
I already disabled RSS (http://support.microsoft.com/default.aspx?scid=kb;...927695 http://support.microsoft.com/default.aspx?scid=kb;...927695)
and I do NOT enforce strict rpc compliance.

The ISA server is member of a AD domain.

When I log on to the ISA server (with domain account) via RDP, it takes a lot of time.
When I look in the eventlog I see the following error:

Event ID 1053:

Windows cannot determine the user or computer name. (The RPC server is unavailable. ). Group Policy processing aborted.

It seems that there is a problem with the RPC connection to the domain controller.

Does anyone have an idea what can be the problem?

Post #: 1

Featured Links*

RE: RPC connections failed - 5.Oct.2007 9:12:36 AM

frankbeerten

Posts: 6
Joined: 22.Feb.2006
Status: offline

After some additional testing, I discovered that the problem is solved if I disable the RPC-filter add-in.

Is this a known issue?

(in reply to frankbeerten)

Post #: 2

RE: RPC connections failed - 5.Oct.2007 9:16:12 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

You shouln't have to disable the RPC filter.

Maybe a DNS problem?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to frankbeerten)

Post #: 3

RE: RPC connections failed - 5.Oct.2007 9:26:25 AM

frankbeerten

Posts: 6
Joined: 22.Feb.2006
Status: offline

Hi Thomas.

I do not think it is a DNS problem. When the firewall service is stopped, the logon works fine (and also when the RPC filter is disabled).

We have two ISA server and both suffer from the same problem.
The ISA servers are running Windows 2003 SP2
Our domain controllers are running Windows 2003 SP1.

When I monitor the connection, I see that the ISA servers makes a connection on port 135 (RPC endpoint-mapper) to the DC but the connection failed.

(in reply to tshinder)

Post #: 4

RE: RPC connections failed - 6.Oct.2007 9:49:16 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Frank,

That's interesting. Did you see this problem before Windows Server 2003 SP2 was installed on the ISA Firewall?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to frankbeerten)

Post #: 5

RE: RPC connections failed - 8.Oct.2007 6:14:54 AM

frankbeerten

Posts: 6
Joined: 22.Feb.2006
Status: offline

Hi Tom,

I'm pretty sure it is related to SP2.

I first installed SP2 and thereafter I installed ISA server. (So I didn't test it without SP2)

On the ISA Server Team Blog website, I noticed that I'm not the only one with this problem.

I did a network trace and I discovered that it is going wrong during the TCP/IP 3-way handshake.

The ISA server send out a SYNC (to DC on port 135).
The DC replies with a SYNC ACK
But then the ISA sends a RESET.

I will investigate it further and if I find a solution, I let you know.
In the meantime, if you have any suggestions...

(in reply to tshinder)

Post #: 6

RE: RPC connections failed - 8.Oct.2007 9:51:11 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Frank,

Thanks! I'll let you know if I find out anything too.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to frankbeerten)

Post #: 7

RE: RPC connections failed - 8.Oct.2007 11:27:14 AM

Andy_UK

Posts: 80
Joined: 12.May2006
From: Suffolk, UK
Status: offline

Hi,
Strangely enough I have just had exactly the same problem, windows Server 2003 R2 SP2 and ISA 2006 standard.
SP2 was installed first and I have only just started getting the problem, seemed to be after I ran through this:
http://support.microsoft.com/kb/154596

although I have now deleted the internet key and the problem is still there.
I am struggling to find the answer.

Andy

(in reply to tshinder)

Post #: 8

RE: RPC connections failed - 8.Oct.2007 11:30:32 AM

elmajdal

Posts: 5071
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

hi Frank,

Try this hotfix ( for win 2003 sp2 ) : http://support.microsoft.com/default.aspx?scid=kb;EN-US;936594

also you have ISA 2006 , have you installed the Supportability Update package http://support.microsoft.com/?kbid=939455

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to frankbeerten)

Post #: 9

RE: RPC connections failed - 8.Oct.2007 12:01:28 PM

Andy_UK

Posts: 80
Joined: 12.May2006
From: Suffolk, UK
Status: offline

Hi Tarek,
I know this is Franks thread, but I have just tried both of these patches and neither has made any difference.

Andy

(in reply to elmajdal)

Post #: 10

RE: RPC connections failed - 9.Oct.2007 2:56:57 AM

frankbeerten

Posts: 6
Joined: 22.Feb.2006
Status: offline

Hi Tarek,

Thanks for the info.
But like Andy, I had both patched already installed.

At the moment, I have disabled the RPC filter.
Now it is working fine.

(in reply to elmajdal)

Post #: 11

RE: RPC connections failed - 9.Oct.2007 4:10:53 AM

Andy_UK

Posts: 80
Joined: 12.May2006
From: Suffolk, UK
Status: offline

Frank
Where have you disabled the RPC compliance? I have disabled it in the System Policy under Authentication Services, but this has made no difference either.

Thanks

Andy

(in reply to frankbeerten)

Post #: 12

RE: RPC connections failed - 9.Oct.2007 5:35:01 AM

frankbeerten

Posts: 6
Joined: 22.Feb.2006
Status: offline

Hi Andy,

I disabled it in the add-ins section.
(so you cannot use it for RPC server publishing any more)
(the "enforce strict ..." did not work for me either

However I have good news.
Although, I thought I installed the Supportability Update package http://support.microsoft.com/?kbid=939455 , but I hadn't.
(Tarek, thanks a lot for this tip)

I just installed it and my problem seems to be solved.
I will also test this our second ISA server.

(in reply to Andy_UK)

Post #: 13

RE: RPC connections failed - 9.Oct.2007 6:31:18 AM

Andy_UK

Posts: 80
Joined: 12.May2006
From: Suffolk, UK
Status: offline

Hi Frank,
Thats good!

Unfortunately neither the patch, nor disabling RPC compliance has worked for me!

Definately and ISA issue as I have just uninstalled it and the server is working normally, will try a reinstall.

Andy

< Message edited by Andy_UK -- 9.Oct.2007 6:36:00 AM >

(in reply to frankbeerten)

Post #: 14

RE: RPC connections failed - 9.Oct.2007 8:15:54 AM

elmajdal

Posts: 5071
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

Hey Frank,

When i first read your reply after i pointed you with the 2 links, i said what the heck !!

but now i am glad that it worked for you. and thanks for the follow up.

but again i am saying what the heck for Andy !!!

Andy , re install ISA Server and install the previous hotfixes again, and hopefully this time you wont have any issue.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to frankbeerten)

Post #: 15

RE: RPC connections failed - 9.Oct.2007 8:57:39 AM

Andy_UK

Posts: 80
Joined: 12.May2006
From: Suffolk, UK
Status: offline

Hi Tarek,
I have just reinstalled ISA and the hotfix. I no longer get the event error when logging into the server.
I will re-add all my rules and see what happens then.

One thing I have noticed when logging in (through RDP and at the Console) that it takes a while to log in, sits at "Applying your personal settings" - have you seen this before?

Thanks

Andy

(in reply to elmajdal)

Post #: 16

RE: RPC connections failed - 12.Oct.2007 1:44:00 PM

abaack

Posts: 3
Joined: 12.Oct.2007
Status: offline

Just putting in my experience:

Just installed Windows 2003 SP1 with ISA 2006 Standard. It has the usability upgrade.

I was experiencing long login delays into the server, pulling up Active Directory queries was nonexistent and anything to do with contacting our Domain Controllers wasn't working.

I disabled the RPC filter and that did work instantly, but I wasn't to see if I could get it to work without disabling it so I tried the RSS fix. After changing the registry, turning the RPC filter back on I rebooted the server and everything works like a chram now.

So in the end, disabling the RSS fixed my machine.

(in reply to Andy_UK)

Post #: 17

RE: RPC connections failed - 21.Jan.2008 2:12:30 PM

fazair23

Posts: 1
Joined: 21.Jan.2008
Status: offline

HI Folk, i have the same scenario with two ISA 2006 array members. Load balanced and Memeber Servers.

- Windows 2003 SP2, ISA Srv Ent.

Simtomps.
When i restart the ISA server, the servirvices dont start and report a RPC communication failure (not available). so I logon locally and when I start services from Nelogon services to ISA Firewall, they start fine, without problems. I have seen many denied conections from ISA1 to ISA2 and teh DC, also I found this sys event.

Source:        LSASRV
Date:          1/11/2008 5:42:04 PM
Event ID:      40960
Task Category: (3)
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      ISA2
Description:
The Security System detected an authentication error for the server ldap/DC1.ad.domainx.com/ad.domainx.com@AD.domainx.COM. The failure code from authentication protocol Kerberos was "An attempt was made to logon, but the netlogon service was not started.
(0xc0000192)".

Ihave tried and the resutl was the same

- disable RPC complaint
- RSS
-

any ideas???

Thaks so much.

(in reply to frankbeerten)

Post #: 18

RE: RPC connections failed - 8.Feb.2008 10:57:38 AM

gruSP

Posts: 7
Joined: 8.Feb.2008
Status: offline

I had this same problem. I downloaded MS ISA Best Practices analyzer and ran a scan with it. It actually showed me every occurence of the RPC filter problem and which rule(s) it was in. After I went through all the rules and cleared the filter, it worked just fine.

(in reply to Andy_UK)

Post #: 19

RE: RPC connections failed - 9.Feb.2008 1:14:44 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Nice tip!
Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to gruSP)

Post #: 20