I have many of those errors in the event view:
DCOM was unable to communicate with the computer X using any of the configured protocols
And it is correct, because the computer X doesn't exist any more, but I don't know what is trying to connect to computer X.
How can I find out which application/service is trying to connect to the computer X?
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System><Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" /><EventID Qualifiers="0">10028</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime="2016-12-08T08:23:11.475435300Z" /><EventRecordID>117706</EventRecordID><Correlation /><Execution ProcessID="748" ThreadID="2836" /><Channel>System</Channel><Computer>Server</Computer><Security UserID="S-1-5-21-3416440569-1641309572-3638930203-1105" /></System> - <EventData><Data Name="param1">X</Data><Data Name="param2">126c</Data><Data Name="param3">C:\Windows\system32\ServerManager.exe</Data></EventData></Event>
The process id 748 is the service "Remote Procedure Call", which doesn't help my further because I don't know what is using it. How can I trace it back and find the origin of the problem?
Thanks