Hi all, seeing a LARGE number of these DCOM errors in the event log (8-10 every minute). They point to IP addresses on different subnets (multi-site WAN). In 90% of cases it gives a client IP, but sometimes will give a DNS name.
Error text is:
DCOM was unable to communicate with the computer 192.168.23.92 using any of the configured protocols.
This one is doing my head in. Mostly when I see the event logged, I am unable to ping the IP address listed, which makes sense why the DCOM error is occurring (although this isn't the case each time). What I need help with, is to find out what is actually attempting to contact the client using DCOM.
The server is a Utility server so serves up a range of services including:
-Print Sharing
-Trend Micro A/V (+ Mobile Security)
-PRTG Network monitoring
-PaperCut
-Network inventorying software
Is there a method I can use to determine what is attempting to contact the clients? I figure if I can find out, then I can look at the software behaviour to perhaps modify how often it attempts to connect to client units.
Any help is appreciated.
David Robertson