WMI and RMA

adam_morris · Post by **adam_morris** » Thu Feb 23, 2006 7:14 am

Hi,

I hope you can help me.

Each time I try to use the WMI test for a remote network host using the RMA I get a RPC connection error.

Using the WMI explorer I get the error directly.

Do I need to connect direct using windows authentication (and VPN)? I thought RMA means this is not necessary. What I am doing wrong?

Thanks for your help.

Ver 5.86 and RMA ver 3.3\3.2 with WMI checked

KS-Soft · Post by **KS-Soft** » Thu Feb 23, 2006 11:20 am

RMA is running in that remote metwork? On target host? On some other system?
RMA is staretd as service? Under local system account?

If you are using RMA to monitor some 3rd system HostMonitor (systemA) <-> RMA (systemB) <-> target host (systemC), you should start RMA under admin or Power User account (depending on tests you need to perform)

What about other test methods? CPU Usage, Process, Performance Counter? I assume these tests do not work either..

Regards
Alex

adam_morris · Post by **adam_morris** » Fri Feb 24, 2006 5:01 am

Alex,

RMA is running on several remote networks and I get the same RPC error on all of them.

The error is independent, whether RMA is running on the target host or not.

RMA somtimes runs as service and sometimes not depending on remote network.

The other tests work OK (get some timeouts and perf counter errors sometimes), but generally its fine.

I have tried running the service (on a machine where it ran as a process) and the account was to domain administrator. Still the same errr: "The RPC server is unavailable"

Regards
Adam

adam_morris · Post by **adam_morris** » Fri Feb 24, 2006 5:16 am

Just checked the event log on the host mon server:

Event ID 10009

"DCOM was unable to communicate with the computer "host name" using any of the configured protocols"

Yoorix · Post by **Yoorix** » Fri Feb 24, 2006 5:57 am

Are you sure you don't have any Anti-Virus, IP-Filter or Firewall?

Could you read this article: http://support.microsoft.com/default.as ... US;Q245197

It might help.

Regards,
Yoorix

adam_morris · Post by **adam_morris** » Fri Feb 24, 2006 6:11 am

We have a firewall on oursite and of course on the remote network sites, but RMA does work and the correct ports are open to allow RMA to work.

I also double checked our antivirus and only some outbaound comms on port 25 is blocked which does affect this.

I check the KB article and our DCOM settings appear to be correct

Yoorix · Post by **Yoorix** » Fri Feb 24, 2006 7:42 am

I assume the DCOM or WMI is not available on the remote hosts that you are trying to audit and you should configure it manually.
I guess there are installed Win2003 or XP, right?
Probably, this article http://www.microforge.net/kb/39 helps you to figure it out.

Regards,
Yoorix

adam_morris · Post by **adam_morris** » Fri Feb 24, 2006 7:46 am

Some of the RMAs run on Windows 2000 server - so I don't this is the problem

Yoorix · Post by **Yoorix** » Fri Feb 24, 2006 7:57 am

Could you run WBEMTEST.exe to ensure WMI is working properly?
This is a standard Windows application.

Regards,
Yoorix

adam_morris · Post by **adam_morris** » Fri Feb 24, 2006 9:32 am

I have ran WBEMTEST on the local and RMA servers. WMI appears to work OK, although I am new to this tool.

Using the root\cimv2 namespace, I am able to list a number of classes on each server (runing the tool locally). Does mean its working OK?

I have not tried the connect facility.

Yoorix · Post by **Yoorix** » Fri Feb 24, 2006 10:21 am

[quote="adam_morris"]
Using the root\cimv2 namespace, I am able to list a number of classes on each server (runing the tool locally). Does mean its working OK?
[/quote]

Yes. It's working OK, but for Local Machine. Try use \\RemoteHostName\root\cimv2 to check how it works with remote host, please.

Regards,
Yoorix

adam_morris · Post by **adam_morris** » Fri Feb 24, 2006 10:48 am

So this comes back to the point I made originally.

I have not actually tried this, but I am pretty sure, if I connect to the remote network (ie via VPN), then using the ip address of the remote host in the connection string, I'm sure this will work.

It fails of course without the connection, because there is no route to the remote host. This is what I thought the RMA was supposed to resolve.

Does this make sence?

KS-Soft · Post by **KS-Soft** » Fri Feb 24, 2006 1:35 pm

Just checked the event log on the host mon server:
Event ID 10009
"DCOM was unable to communicate with the computer "host name" using any of the configured protocols"

On HostMon server?? In means you are not using RMA to perform the test. HostMonitor tries to perform the test by itself.
Please check "Test by" parameter of the test item.

Regards
Alex

adam_morris · Post by **adam_morris** » Mon Feb 27, 2006 3:31 am

Each test is definately using the correct RMA server on "Test by"

KS-Soft · Post by **KS-Soft** » Mon Feb 27, 2006 12:09 pm

Could you send test settings to support@ks-soft.net? We need HML file with tests and agents.lst file.
Also, what version of HostMonitor and RMA do you use?

Regards
Alex