question

Rafiq-6536 avatar image
0 Votes"
Rafiq-6536 asked JiaYou-MSFT commented

DCOM was unable to communicate with the computer xxxxxxxx using any of the configured protocols; requested by PID 4190 (C:\Windows\system32\ServerManager.exe).

Hey there!

We get the error on Windows server 2016. We have removed that server from our environment and we do not need it anymore.

It is also removed from Server Manager all servers section; however, the error still occurs.

Because the computer does not exist on the network any more, how to stop the DCOM from looking for it?

windows-server-2016
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JiaYou-MSFT avatar image
1 Vote"
JiaYou-MSFT answered

HI
1.if we run task manager in issue server w2016 ,can we find what's process for the pid 4190 ?
2.did you try to reboot your server ?
3.if we run process monitor and wait the event happen then write down the issue time.enter ctrl+s to save the process monitor log to local disk,can you find which process accour this event at event occur time?
Process Monitor v3.53
https://docs.microsoft.com/en-us/sysinternals/downloads/procmon

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Rafiq-6536 avatar image
0 Votes"
Rafiq-6536 answered JiaYou-MSFT commented

Hi there!

Thank you for your response.

1, 3. There is no record about the PID 4190
2. We have rebooted many times so far.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HI
4.what's function about the removed server ?DHCP server or DNS server etc ?
5.do you have event id 10009 for this issue ?
6.how often the issue event log happen ?we can use process monitor to capture process monitor log so that we can find which switch trigger this event .
7."DCOM was unable to communicate with the computer xxxxxxxx"
I also think we can search the removed computer's host name in registry on issue server then check if there is still removed computer's host name record.

Event ID 10009 — COM Remote Service Availability
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc774368(v=ws.10)?redirectedfrom=MSDN

0 Votes 0 ·