The Remote Procedure Call (RPC) service terminated unexpectedly.

Sponsored Links

I have a Windows 2003 Server that reboots itself periodicaly, whith the info
included below.

It would appear to be related to a remote procedure call, but I have no clue
where to even start looking. Any hints would be greatly appreciated.

Thanks

Joe
====


Event Type: Information
Event Source: USER32
Event Category: None
Event ID: 1074
Date: 3/29/2007
Time: 4:09:53 PM
User: NT AUTHORITY\SYSTEM
Computer: WJFF-DS1
Description:
The process winlogon.exe has initiated the restart of computer WJFF-DS1 on
behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for
this reason could be found
Reason Code: 0x30006
Shutdown Type: restart
Comment: Windows must now restart because the Remote Procedure Call (RPC)
service terminated unexpectedly

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 06 00 03 00 43 00 3a 00 ....C.:.
0008: 5c 00 57 00 49 00 4e 00 \.W.I.N.
0010: 44 00 4f 00 57 00 53 00 D.O.W.S.
0018: 5c 00 73 00 79 00 73 00 \.s.y.s.
0020: 74 00 65 00 6d 00 33 00 t.e.m.3.
0028: 32 00 5c 00 4c 00 6f 00 2.\.L.o.
0030: 67 00 46 00 69 00 6c 00 g.F.i.l.
0038: 65 00 73 00 5c 00 53 00 e.s.\.S.
0040: 68 00 75 00 74 00 44 00 h.u.t.D.
0048: 6f 00 77 00 6e 00 5c 00 o.w.n.\.
0050: 53 00 68 00 75 00 74 00 S.h.u.t.
0058: 44 00 6f 00 77 00 6e 00 D.o.w.n.
0060: 5f 00 32 00 30 00 30 00 _.2.0.0.
0068: 37 00 30 00 33 00 32 00 7.0.3.2.
0070: 39 00 31 00 36 00 30 00 9.1.6.0.
0078: 39 00 34 00 32 00 2e 00 9.4.2...
0080: 78 00 6d 00 6c 00 00 00 x.m.l...

---------


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 3/29/2007
Time: 4:09:52 PM
User: N/A
Computer: WJFF-DS1
Description:
The Remote Procedure Call (RPC) service terminated unexpectedly. It has
done this 1 time(s). The following corrective action will be taken in 60000
milliseconds: Reboot the machine.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

These articles may help.

http://support.microsoft.com/default...b;en-us;897648
http://support.microsoft.com/default...b;en-us;911185
http://support.microsoft.com/default...b;en-us;915335

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Joe Befumo" wrote:
>I have a Windows 2003 Server that reboots itself periodicaly, whith the
>info included below.
>
> It would appear to be related to a remote procedure call, but I have no
> clue where to even start looking. Any hints would be greatly appreciated.
>
> Thanks
>
> Joe
> ====
>
>
> Event Type: Information
> Event Source: USER32
> Event Category: None
> Event ID: 1074
> Date: 3/29/2007
> Time: 4:09:53 PM
> User: NT AUTHORITY\SYSTEM
> Computer: WJFF-DS1
> Description:
> The process winlogon.exe has initiated the restart of computer WJFF-DS1 on
> behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for
> this reason could be found
> Reason Code: 0x30006
> Shutdown Type: restart
> Comment: Windows must now restart because the Remote Procedure Call (RPC)
> service terminated unexpectedly
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 06 00 03 00 43 00 3a 00 ....C.:.
> 0008: 5c 00 57 00 49 00 4e 00 \.W.I.N.
> 0010: 44 00 4f 00 57 00 53 00 D.O.W.S.
> 0018: 5c 00 73 00 79 00 73 00 \.s.y.s.
> 0020: 74 00 65 00 6d 00 33 00 t.e.m.3.
> 0028: 32 00 5c 00 4c 00 6f 00 2.\.L.o.
> 0030: 67 00 46 00 69 00 6c 00 g.F.i.l.
> 0038: 65 00 73 00 5c 00 53 00 e.s.\.S.
> 0040: 68 00 75 00 74 00 44 00 h.u.t.D.
> 0048: 6f 00 77 00 6e 00 5c 00 o.w.n.\.
> 0050: 53 00 68 00 75 00 74 00 S.h.u.t.
> 0058: 44 00 6f 00 77 00 6e 00 D.o.w.n.
> 0060: 5f 00 32 00 30 00 30 00 _.2.0.0.
> 0068: 37 00 30 00 33 00 32 00 7.0.3.2.
> 0070: 39 00 31 00 36 00 30 00 9.1.6.0.
> 0078: 39 00 34 00 32 00 2e 00 9.4.2...
> 0080: 78 00 6d 00 6c 00 00 00 x.m.l...
>
> ---------
>
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7031
> Date: 3/29/2007
> Time: 4:09:52 PM
> User: N/A
> Computer: WJFF-DS1
> Description:
> The Remote Procedure Call (RPC) service terminated unexpectedly. It has
> done this 1 time(s). The following corrective action will be taken in
> 60000 milliseconds: Reboot the machine.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>

Thanks so much for the pointers. I'll check them out.

Joe

"Dave Patrick" <DSPatrick@nospam.gmail.com> wrote in message
news:73EF90BE-688B-4285-8D54-01D3405D3DA7@microsoft.com...
> These articles may help.
>
> http://support.microsoft.com/default...b;en-us;897648
> http://support.microsoft.com/default...b;en-us;911185
> http://support.microsoft.com/default...b;en-us;915335
>
> --
>
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "Joe Befumo" wrote:
>>I have a Windows 2003 Server that reboots itself periodicaly, whith the
>>info included below.
>>
>> It would appear to be related to a remote procedure call, but I have no
>> clue where to even start looking. Any hints would be greatly appreciated.
>>
>> Thanks
>>
>> Joe
>> ====
>>
>>
>> Event Type: Information
>> Event Source: USER32
>> Event Category: None
>> Event ID: 1074
>> Date: 3/29/2007
>> Time: 4:09:53 PM
>> User: NT AUTHORITY\SYSTEM
>> Computer: WJFF-DS1
>> Description:
>> The process winlogon.exe has initiated the restart of computer WJFF-DS1
>> on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title
>> for this reason could be found
>> Reason Code: 0x30006
>> Shutdown Type: restart
>> Comment: Windows must now restart because the Remote Procedure Call (RPC)
>> service terminated unexpectedly
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: 06 00 03 00 43 00 3a 00 ....C.:.
>> 0008: 5c 00 57 00 49 00 4e 00 \.W.I.N.
>> 0010: 44 00 4f 00 57 00 53 00 D.O.W.S.
>> 0018: 5c 00 73 00 79 00 73 00 \.s.y.s.
>> 0020: 74 00 65 00 6d 00 33 00 t.e.m.3.
>> 0028: 32 00 5c 00 4c 00 6f 00 2.\.L.o.
>> 0030: 67 00 46 00 69 00 6c 00 g.F.i.l.
>> 0038: 65 00 73 00 5c 00 53 00 e.s.\.S.
>> 0040: 68 00 75 00 74 00 44 00 h.u.t.D.
>> 0048: 6f 00 77 00 6e 00 5c 00 o.w.n.\.
>> 0050: 53 00 68 00 75 00 74 00 S.h.u.t.
>> 0058: 44 00 6f 00 77 00 6e 00 D.o.w.n.
>> 0060: 5f 00 32 00 30 00 30 00 _.2.0.0.
>> 0068: 37 00 30 00 33 00 32 00 7.0.3.2.
>> 0070: 39 00 31 00 36 00 30 00 9.1.6.0.
>> 0078: 39 00 34 00 32 00 2e 00 9.4.2...
>> 0080: 78 00 6d 00 6c 00 00 00 x.m.l...
>>
>> ---------
>>
>>
>> Event Type: Error
>> Event Source: Service Control Manager
>> Event Category: None
>> Event ID: 7031
>> Date: 3/29/2007
>> Time: 4:09:52 PM
>> User: N/A
>> Computer: WJFF-DS1
>> Description:
>> The Remote Procedure Call (RPC) service terminated unexpectedly. It has
>> done this 1 time(s). The following corrective action will be taken in
>> 60000 milliseconds: Reboot the machine.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>>
>

You're welcome.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Joe Befumo" wrote:
> Thanks so much for the pointers. I'll check them out.
>
> Joe