RPC Error on logon script

[SpyWeb]

Hello,

Lansweeper seems to be a great program, but I have somes problems.

In my domain lansweeper is launched by a logon script.

But I have this error
"Wmierror Le serveur RPC n'est pas disponible. (Exception de HRESULT : 0x800706BA) CAFEOLIX (192.168.22.22)"


XP Firewall is Off.
Nslookup is OK.

Connection test is OK:

Ping test OK
Remote registry test OK
Remote WMI access test OK
Remote \\192.168.22.30\c$ access test OK


DCOM is enabled and I tried this http://www.lansweeper.com/kb/notfound.aspx but no result.



After the logon, if I launch again the logon script, it work, there are no errors.


Can someone help me ?


Thanks.
SpyWeb.

[Hemoco]

Also check out this page : http://technet.microsoft.com/en-us/library/cc755604.aspx

[SpyWeb]

Hello,

I think your are right.

I tried batch scripts waiting for RPCss service, firewall(SharedAccess) service, Rasman service, before launching LSclient. It hasn't worked.
Only the "gpupdate /force" on login script works.

Thank you.

Sincerely,
SpyWeb

[SpyWeb]

Hello,

My GPO is fully applied to all computers.

But if a remove the line "gpupdate /force" of login script I retrive a lot of RPC errors.
I think that "gpupdate /force" give more time to start RPC service.

Do you think that there are a solution ?

Sincerely,
SpyWeb

[Hemoco]

SpyWeb wrote:
Hello,

My GPO is fully applied to all computers.

But if a remove the line "gpupdate /force" of login script I retrive a lot of RPC errors.
I think that "gpupdate /force" give more time to start RPC service.

Do you think that there are a solution ?

Sincerely,
SpyWeb

The gpupdate /force forces the policy (and is switching off your firewall which is causing the problem)
The RPC starting is not the problem, it's just the firewall that's on that's blocking the connections.

This is a know and tricky problem which can be caused by a lot of things.
This thread should get you started understanding the problem : http://www.eggheadcafe.com/software/aspnet/31969739/xp-firewall-gpo-not-apply.aspx

[SpyWeb]

I think that I found my error with GPO.
I tried to put the GPO on the user organisation unit, It seems work if I put the GPO on the domain level.
I will verify that monday.

Sincerely.
SpyWeb

[SpyWeb]

Hello,

I don't know why, but the firewall GPO on the domaine controller isn't applied to XP clients (proxy by gpo works).
I can see that with rsop.

Sincerely,
SpyWeb

[Hemoco]

You only need to create the GPO once, you don't need to do any changes on your clients for this.

[SpyWeb]

Hello,

I think your are right.

This afternon I tried tu put firewall service tu manual it worked !

I tried to modifie the GPO on a XP test machine with this procedure: http://www.lansweeper.com/kb/firewall.aspx
It worked.

But I don't want to do it on all computers...

I tried to create a GPO on the User organisation unit of the active directory (windows 2003), same configuration.
But the local computer don't seen that firewall GPO.
With the command "netsh firewall show state" I haven't "Group policy version = Windows Firewall".
"gpupdate /force" works but not resolve anything, I tried it on the Server and client.

Sincerely,
SpyWeb

[Hemoco]

We've seen this problem before when the firewall is on by default and it is only switched off later by a GPO or something similar.

If you switch it off with a GPO you can run "gpupdate /force" before the lsclient part in the script.