Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Winlogon 1219 - RPC server unavailable

Winlogon 1219 - RPC server unavailable

Symptoms

There are multiple users connecting to Terminal server. when users connect to a disconnected terminal server session (or try to log on to create a new session) intermittently they get the error message "Rpc server is unavailable"

The following event can be seen in the EVT log of the Terminal Server:

Event Type: Error
Event Source: Winlogon
Event Category: None
Event ID: 1219
Date:  11/07/2012
Time:  12:00:02
User:  N/A
Computer: Computername

Description:
Logon rejected for DOMAIN\username. Unable to obtain Terminal Server User Configuration. Error: The RPC server is unavailable.
 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: ba 06 00 00               º...

↑ Back to the top

Cause

During logon the Terminal server tries to connect to the Domain controller to acess user TS profile information. In order to connect to the DC name resolution has to be done. The connection fails because the local NetBT driver is too busy servicing requests and the name resolution request time's out before it goes out to the network.

↑ Back to the top

Resolution

To resolve this issue, use one of the suggested methods in http://support.microsoft.com/kb/875441

So either modify the value of the LmhostsTimeout registry entry OR install IPV6.

↑ Back to the top

More Information

Ways to diagnose the issue:

1. IF you take a network trace you will notice that after authentication there is no SMB session setup from the TS to the DC in a failing scenario. There is no SMB session setup request going out of the TS.

2. If you take a Procmon during the logon you will see the following:

Failing Logon

"winlogon.exe" "CreateFile","\\dcname.domain.com\PIPE\lsarpc","BAD NETWORK PATH" 

Working Logon

 "winlogon.exe", "CreateFile "\\dcname.domain.com\PIPE\lsarpc","SUCCESS"

↑ Back to the top

Keywords: vkball, kb

↑ Back to the top

Article Info
Article ID : 2582286
Revision : 1
Created on : 1/8/2017
Published on : 7/25/2012
Exists online : False
Views : 200