Do those machines have BESR or SSR installed on them? Take a look at this: http://www.symantec.com/business/support/index?page=content&id=TECH125800
http://www.symantec.com/business/support/index?page=content&id=TECH69112 Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From: Jesse Rink <jr...@sourceonetechnology.com> To: "ntsysadm@lists.myitforum.com" <ntsysadm@lists.myitforum.com> Date: 02/05/2014 11:05 AM Subject: [NTSysADM] DCOM Sent by: listsad...@lists.myitforum.com I admit little experience with DCOM. Here's my situation. I have a W2008R2 server running Backup Exec Media Server (2012) and nothing else except the standard HP Agent Software that's loaded on it. No roles associated with it except an MS iSCSI Target. Oddly enough, I am getting countless DCOM errors showing up in the servers System Log. Event id 10006, source is DistributedCOM. The messages are "DCOM got error "2147944122" from computer (computer-name here) when attempting to activate the server: {8BC3F05E-D86B-11D0-A075-00C04FB68820} I believe the error is because the machines are turned off, however, **my BIGGER interest is WHY** this server, which only serves as a backup server, is attempting to contact PCs using DCOM. It happens only once a day, and seems to occur between 10:30am and 12:30pm most of the time. I just don't understand what application or process is doing this and WHY. These DCOM errors have been showing in the SYSTEM log, once per day (well, once per attempt of EACH computer, once per day) for over 12 months... so it's definitely not anything new. I'm just finally getting around to looking into it. I'm thinking about setting up a wireshark capture during that time period, but wireshark captures tend to get really BIG and I don't know what to filter on for DCOM. Thoughts? ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.
<<image/jpeg>>
