Good morning,
Like many we've been inundated with 10009 events in the logs of our servers. The root causes have been primarily bad DNS entries on the server and aggressive AV with firewalls blocking server comms to the workstations.
One case has me baffled though. We have a machine that is not in the office but is connected to the Internet from the user's home. This machine, while in this location and without VPN, is being reported in the servers logs with 10009 errors. The one link back to the server, an sbs 2011 server, is Outlook Anywhere.
Could the RPC over HTTPS be causing the server to think that the workstation is available and therefore causing it to attempt to communicate, fail, and generate the 10009 events?
Perhaps more importantly, can it be stopped?
thanks in advance,
dean