The "RPC server unavailable Error code: 6ba " occurs when the software is unable to connect to the machines for collecting event logs. Please ensure the communication between ADAudit Plus and the concerned Member Server is proper and make sure that the " Windows Event Log " service and " TCP/IP Helper " service is running on the corresponding servers.
Please ensure, these ports are not blocked by any firewall (Interrupting the communication between ADAudit Plus & Servers).
* Port "389" to communicate with the LDAP Protocol.
* Port "135" to communicate with RPC.
* Port "445" to communicate with NetBIOS Session Service.
* Port "49153" - Inbound rule for the RPCSS service to allow RPC/TCP traffic for the local Event Log Service.(this is the default event collection method)
* Port "49155" - If WMI based event log collection is enabled(this is not the default)
Enabling Remote Event log Management:
Open the Windows Firewall with Advanced Security snap-in.
Server Manager -> Local Server -> Properties Page -> Click the link for the Windows Firewall -> Click on 'Advanced Settings' ( or )
Start -> Run -> WF.msc -> Click 'Inbound Rules' (left hand side tree)
Verify that exceptions to the following firewall rules are enabled, and have not been disabled by Group Policy settings. If any are not enabled, go on to the next step.
COM+ Network Access (DCOM-In)
Remote Event Log Management (NP-In)
Remote Event Log Management (RPC)
Remote Event Log Management (RPC-EPMAP)
Right-click the rules that are not enabled, and then click Enable Rule on the context menu.
Close the Windows Firewall with Advanced Security snap-in.