Link to home
Start Free TrialLog in
Avatar of m4a2t0t
m4a2t0t

asked on

RSOP-GPRESULT on remote machine

trying to run both gpresult from the command line and rsop from the mmc snapin. My problem is I get errors saying that it couldnt find the RPC server. I am trying to connect remotly to the machine.

Y:\>gpresult /s crp-office3-1 /user talkabout\misty /v >mistygp.txt
ERROR: The RPC server is unavailable.

Both RPC services are started on the machine. Any suggestions to get this working?
Avatar of bccoates
bccoates

Did you verify that there are no firewalls preventing the command?
Avatar of m4a2t0t

ASKER

Im tryig to connect to PC's on my LAN right now
Is Windows Firewall or some other software firewall enabled on the systems in question?
Avatar of m4a2t0t

ASKER

ya windows firewall is, I forgot about that one.
Avatar of m4a2t0t

ASKER

So what ports need to be opened? I disabled the firewall on a machine and it works. I tried opening ports 135 TCP/UDP but that doesnt work.
Try port 593.
Disregard last comment.  Looks like it might use random high ports.  Might want to try using netstat while executing the command to see what ports.

Identifying the ports
1. Start the program and try to use its network features. For example, with a multimedia program, try to start an audio stream. With a Web server, try to start the service.
2. At a command prompt, type Netstat –ano > netstat.txt, and then press ENTER. This command creates the Netstat.txt file. This file lists all the listening ports.  
3. At the command prompt, type Tasklist > tasklist.txt, and then press ENTER. If the program in question runs as a service, type Tasklist /svc > tasklist.txt instead of Tasklist > tasklist.txt so that the services that are loaded in each process are listed.
4. Open the Tasklist.txt file, and then locate the program that you are troubleshooting. Write down the Process Identifier for the process, and then open the Netstat.txt file. Note any entries that are associated with that Process Identifier and the protocol that is used.  
If the port numbers for the process are less than 1024, the port numbers will probably not change. If the numbers that are used are greater than or equal to 1024, the program may use a range of ports. Therefore, you may not be able to resolve the issue by opening individual ports.
Avatar of m4a2t0t

ASKER

All I see is RpcSs uses PID 972 and port 135 TCP. I also see the locator(RPClocator) which was using PID 1800 but I dont see it listed when I do a netstat. I did enable the firewall logging and I see that it is changing the port number. I tried allowing the locator.exe as a program exception but that didnt work.
ASKER CERTIFIED SOLUTION
Avatar of bccoates
bccoates

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of m4a2t0t

ASKER

Ok so all that needed to be done is set group policy to all remote administration, which in turn opens port 135, 445 and allows svchost and lsass to unsolicited incoming messages.

Im not sure why it said to open port 135 and allow program exception for unsecapp on the administrative computer.

Many thanks for your help!!
There is no entry for RSOP on the web page listed: http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2maint.mspx 

This page is about deploying Windows XP SP2 using SUS.



Keatscon, check out the section titled
"Administering Remote RSoP with the RSoP MMC snap-in" at
http://technet.microsoft.com/en-us/library/cc782615(WS.10).aspx