Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 6 replies
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 23182 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Many Errors Event ID 10028

alejandro solar

Hi, my problem is in the DC Server the event log show in tha last hour 10210 log of event id 10028, for me it's too many.

Please, help me, how can i resolve this or what trigger this.

Thanks



This thread was automatically locked due to age.
Parents
  • 0

    Hi Alejandro,

    Those are DCOM errors which might be caused due to failed WMI queries. Perform WMI\Registry read access verification to user’s IP address. If the query fails then follow the steps:

    • Windows firewall or Antivirus could block WMI\Registry read access query. Add exception for TCP port 445 and 135 in client machine.
    • Make sure that RPC, RPC locator, DCOM, WMI services are enabled in the system.
    • Client machine should resolve AD FQDN, if not add host entry into machine or use AD IP as primary DNS.
    • If there is any router/firewall in between, make sure that port 135 and 445 is open.
    • Ensure that administrator account used in STAS is having administrator rights on client system.

    Hope that helps.

Reply
  • 0

    Hi Alejandro,

    Those are DCOM errors which might be caused due to failed WMI queries. Perform WMI\Registry read access verification to user’s IP address. If the query fails then follow the steps:

    • Windows firewall or Antivirus could block WMI\Registry read access query. Add exception for TCP port 445 and 135 in client machine.
    • Make sure that RPC, RPC locator, DCOM, WMI services are enabled in the system.
    • Client machine should resolve AD FQDN, if not add host entry into machine or use AD IP as primary DNS.
    • If there is any router/firewall in between, make sure that port 135 and 445 is open.
    • Ensure that administrator account used in STAS is having administrator rights on client system.

    Hope that helps.

Children
No Data