| Event Id | 9 |
| Source | Microsoft-Windows-RPC-Events |
| Description | Application (%1) (PID: %2) has failed to complete a COM/RPC call because of an invalid message from the server. User Action: Try the operation again. If the problem persists, contact your system administrator. |
| Event Information | According to Microsoft : Cause : This event is logged when Application has failed to complete a COM/RPC call because of an invalid message from the server. Resolution : Report the error to the application developer An error condition may have resulted from a problem in the application's code. The data item used to return data to the client is not large enough to hold the return data. Report the entire event message and related text to the application developer so that the developer can debug and fix the application. Verify You can verify that the Remote Procedure Call (RPC) service (RpcSs) is running by opening the Services administrative tool and ensuring that the status of the service is Started. To perform these procedures, you must have membership in Administrators, or you must have been delegated the appropriate authority. To open the Services administrative tool and verify that the Remote Procedure Call (RPC) service is running: 1.Click StartRun. 2.Type services.msc, and then click OK. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue. 3.To locate the Remote Procedure Call (RPC) service in the list of services, scroll down to Remote Procedure Call (RPC). 4.Verify that the status of the service is Started. Using RPC Firewall Filters, an administrator can control the network interfaces that the RpcSs is allowed to listen on. The administrator can use RPC Firewall Filters to block some interfaces from being accessed over a given network interface while allowing other interfaces to be accessed over the same network interface. RPC Firewall Filters make it possible for the administrator to configure network interface access on a per-interface level of detail. You can verify that the RPC filters running on the system are the filters that you expect. To verify the RPC filters: 1.Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue. 2.Type netsh rpc filter show filter, and then press ENTER. 3.Confirm that any RPC filters in the list are the filters that you expect. |
| Reference Links | Event ID 9 from Source Microsoft-Windows-RPC-Events |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.