After removing a server from the domain and removing it from service, I started getting DCOM events and other events with the IWAM and IUSR accounts for that server. For some reason it's IIS guest was beingused as a guest account for IIS on one of our DC's. I changed that , I also when into AD and removed the IUSR and IWAM accounts for this removed server. Then deleted it' account. ALso I had to change the DC Security Policy and remove those accoutn from Log on as batch job and Access this computer from the network. I did that, now I have this event 10004 and can't find the DCOM component that the event id is talking about.
This is a tricky one to fix..
This is a tricky one to fix..