The RPC Endpoint Mapper is used by any process, service, or application that utilizes WMI, DCOM, or a host of other Microsoft technologies. It is not at all specific to SAM, though SAM does leverage the RPC Port Mapper service when querying devices via WMI, no differently than any other application that utilizes WMI. Let's take this from the top. Where are these Windows Events appearing? Is it on the Orion server or some other server in your environment? Are you also running NTA, IPAM or UDT on the same machine as SAM? If so, which? If you shutdown the Orion services, do new event log messages similar to these cease being generated in the Event Log?
↧