WMI authentication fails temporarily for several (maybe all) servers, then starts working again
I recently created a file monitor for three of my servers. Now OpManager unexpectedly sends a notification that the file doesn't exist when in fact it does. I have found that when this happens, testing credentials on the monitored server from OpManager fails. When I check WMI credentials from OpManager on other servers, the check credential task fails as well. Then after a couple of polling periods I get an all clear notification and the credential test passes. This has probably been happening for a long time, I just wasn't being notified of it until I created a file monitor.
Does anyone know what can be causing this? I used wireshark to capture data during the time wmi authentication fails, and found that DCERPC protocol listed the following error:
Fault: nca_s_fault_access_denied
Also get the event in system log of OpManager server
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 3/13/2017 12:26:03 PM
Event ID: 10009
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: xxxxx
Description:
DCOM was unable to communicate with the computer 10.27.14.115 using any of the configured protocols.