DCOM error in event viewer every 30 seconds?

[Mateo1041]

Hi everyone,

I noticed I've been getting DCOM errors in the System event viewer every 30 seconds or so (event ID 10009):

"DCOM was unable to communicate with the computer LIFE2 using any of the configured protocols."

Does anyone have any idea what this means? LIFE2 is a server we access every day with no trouble (at least from our perspective).

I'm not sure how far back this goes as I can only see events from the past week or two. The only two new installs I did recently were a new Novell NetWare Client upgrade and Windows Defender Beta 2 install.

Thanks,
- Matt.

 

[linney]

See if you can get some clues here.

http://www.eventid.net/display.asp?eventid=10009&eventno=579&source=DCOM&phase=1

 

[Mateo1041]

I did find that link when searching Google, but nothing has seemed to help so far. None of my day to day activities have been interrupted by this DCOM error, but I would like to know why the event ID error says my PC can't contact the LIFE2 server. I'm continuously on the network and have never had trouble contacting LIFE2. In fact, I can ping LIFE2 right now.

Thanks for the help so far.

 

[linney]

To shut down DCOM completely.

"Since no typical Windows user has ever needed to have DCOM enabled, it should be shut down immediately and disabled (after first making sure that it's safely patched when it's enabled and running). The DCOMbobulator makes this as easy as pressing a single "Disable DCOM" button. You can then restart Windows and verify that DCOM has been safely taken out of service."

http://www.grc.com/dcom/

DCOM Windows XP
Do You Need It?

http://www.updatexp.com/dcom-windows-xp.html

You can do further research here if you like.

http://groups-beta.google.com/group...s=GGLD,GGLD:2004-50,GGLD:en&q="DCOM+disabled"

http://www.google.com/search?source...s=GGLD,GGLD:2004-50,GGLD:en&q="DCOM+disabled"

Disable DCOM on all affected computers: When a computer is part of a network, the DCOM wire protocol enables COM objects on that computer to communicate with COM objects on other computers.

You can disable DCOM for a particular computer to help protect against this vulnerability, but doing so disables all communication between objects on that computer and objects on other computers. If you disable DCOM on a remote computer, you then cannot remotely access that computer to re-enable DCOM. To re-enable DCOM, you must have physical access to that computer.

To manually enable (or disable) DCOM for a computer:
Run Dcomcnfg.exe.


Repeated DCOM errors in Event veiwer
thread779-893026

PC hangs for 3-7 min. just after signing on internet
thread779-1082303

DCOM error after SP2 update
thread779-900341

 

[Mateo1041]

Thanks for all the links! I'll check these out. By all means, why even have an unused DCOM service running in the first place? Good idea.