DCOM Errors (Event ID 10009)

8 Jun 2006 1:47 PM

Jon Limmer

I am constantly (every few minutes) getting errors in my Event log on my Exchange 2003 (SP2) server (Windows 2K3 SP1) though I've not seen anything unusual occuring otherwise. The information is:

Source: DCOM
Category: None
Event ID: 10009
Description: DCOM was unable to communicate with the computer
<my_servername>.<domain>.com using any of the
configured protocols.

One thing I immediately noticed is the value for <domain> is not correct. We went through the process of renaming our domain over a year ago. The value shown in the description is the old value and no longer part of our internal DNS and certainly not registered on the Internet. If I could figure out where to change the value this server has registered for the domain in DCOM (or whereever it's getting called from), these errors might go away.

The problem is that I have no idea where to look. I've already seached the registry (regedit) for the incorrect domain name. I've blindly poked around in "Component Management" looking for this as well.

I got and applied the hot fix referred to in KB 910695 (and the related KB 910730), hoping to get more information in the Event log to help me see where the source problem is but no additionaly information has shown. Still, the incorrect domain name might be the single issue and this hot fix might not be able to point me in any better direction.

What I need to know is the various places to look (AD, registry, other configuration areas, etc).

Thanks.
Jon

8 Jun 2006 3:02 PM

Brian

"Jon Limmer" <jonlim***@hotmail.com> wrote

> I got and applied the hot fix referred to in KB 910695 (and the related KB
> 910730), hoping to get more

I had a similar problem with a situation because the domain was wrong. I
found there was an incorrect registry entry, but it had no friendly name. So
I had to manually go through the properties of each DCOM config item. But
once I found it and fixed it, that solved the problem.

Brian

8 Jun 2006 5:10 PM

Jon Limmer

Did you use Component Management to look at each DCOM item or simply edit
the registry? I've already searched through the registry, replacing the old
domain name (in areas that didn't seem related to DCOM), but the errors are
still being recorded every 5 minutes.

Jon

8 Jun 2006 6:21 PM

Brian

"Jon Limmer" <jonlim***@hotmail.com> wrote
> Did you use Component Management to look at each DCOM item or simply edit
> the registry? I've already searched through the registry, replacing the
> old domain name (in areas that didn't seem related to DCOM), but the
> errors are still being recorded every 5 minutes.

I had to search through the registry for the key that was mentioned in the
event viewer error. That key is supposed to contain a reference to a
"friendly name", but mine didn't. All it had was a reference to another key.
So I searched through the Component Manager to find that second key. Once I
found that, I was able to change the properties and fix the error.

Brian