Announcement

Collapse
No announcement yet.

TCP port 135 (epmap service): NOT LISTENING

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • TCP port 135 (epmap service): NOT LISTENING

    Hi guys

    pleasssssssssse anyone?

    i have a problem in my DC 2003-SP2. it think it started after applying SP2 a week ago.
    it was first discovered by failing to log into DHCP mmc on that server (red x shown), although clients CAN register in DHCP!!! then i found that WINS also has red x mark (but availiable as well).
    then i ran dcdiag and found lot's of errors which i believe i repaired most of them - except replication problems.

    when i run LOCALY portqry -n server -e 135 on my local DC it fails with
    TCP port 135 (epmap service): NOT LISTENING

    when i run it on all other remote DCs it is successfull!

    all services (rpc, netlogon, server' workstation, browser) are up and running.

    and of course i can't move FSMO to another server...


    i'll appriciate any help

    thanks

    LZ

  • #2
    Re: TCP port 135 (epmap service): NOT LISTENING

    please post a DCdiag, netdiag, check you're firewall, check eventviewer and reboot.
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: TCP port 135 (epmap service): NOT LISTENING

      thanks for the quick response
      1. no firewall. the portqry command runs localy and fails. netstat doesn't show 135/139/ etc
      2.event log 5719 is logged:
      This computer was not able to set up a secure session with a domain controller in domain TIKSHOOV due to the following:
      The RPC server is unavailable.
      This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.
      3. even logged 1056
      The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service. This is not a recommended security configuration. Credentials for Dynamic DNS registrations may be configured using the command line "netsh dhcp server set dnscredentials" or via the DHCP Administrative tool.

      result of running netsh command as described is
      Unable to determine the DHCP Server version for the Server 10.30.0.100.
      Server may not function properly.


      4. attached netdiag and dcdiag outputs

      thanks!

      LZ

      Comment


      • #4
        Re: TCP port 135 (epmap service): NOT LISTENING

        thanks for the quick response-and now with attachments
        1. no firewall. the portqry command runs localy and fails. netstat doesn't show 135/139/ etc
        2.event log 5719 is logged:
        This computer was not able to set up a secure session with a domain controller in domain TIKSHOOV due to the following:
        The RPC server is unavailable.
        This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.
        3. even logged 1056
        The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service. This is not a recommended security configuration. Credentials for Dynamic DNS registrations may be configured using the command line "netsh dhcp server set dnscredentials" or via the DHCP Administrative tool.

        result of running netsh command as described is
        Unable to determine the DHCP Server version for the Server 10.30.0.100.
        Server may not function properly.


        4. attached netdiag and dcdiag outputs

        thanks!

        LZ
        Attached Files

        Comment


        • #5
          Re: TCP port 135 (epmap service): NOT LISTENING

          already rebooted the server?
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment


          • #6
            Re: TCP port 135 (epmap service): NOT LISTENING

            sure, few times

            Comment


            • #7
              Re: TCP port 135 (epmap service): NOT LISTENING

              Hi, Lior.
              Have a look at this article: http://kb.prismmicrosys.com/evtPass/...ogon_44345.asp (it requires registration, but it's free). See if anything from there will help (see the Related Links too).

              Sorin Solomon


              In order to succeed, your desire for success should be greater than your fear of failure.
              -

              Comment


              • #8
                Re: TCP port 135 (epmap service): NOT LISTENING

                Thanks Sorin
                I have this even 5719 but it's different. the value"MaxDgramBuffering" and the whole article referes to Win2000 while i have 2003.
                is it safe to change it?

                LZ

                Comment


                • #9
                  Re: TCP port 135 (epmap service): NOT LISTENING

                  Originally posted by liorz66 View Post
                  is it safe to change it?
                  Well, it's hard to tell. A (too) short explanation about this value can be found here .
                  The one before last in the list of related links specifies the same problem with the same solution. But there is stated that is only for Windows 2000 Server. So' I wouldn't change it in a 2003 DC.
                  I'll keep looking, hope I'll come up with something.

                  Sorin Solomon


                  In order to succeed, your desire for success should be greater than your fear of failure.
                  -

                  Comment

                  Working...
                  X