Get-WmiObject Win32_ComputerSystem return 0x800706BA error

J. L 1 Reputation point
2020-09-21T14:59:33.14+00:00

In my environment, it has a root AD domain which has two child domain child1 and child2.

The server, Windows 2016, is in child1 domain. For a client computer, Windows 10, which is in child1 domain, if I run command as following
Get-WmiObject Win32_ComputerSystem -ComputerName myServer
It works fine as expected.

However on the exact same client computer, I made it to join child2 domain, then running the same command returned error as following

Get-WmiObject : The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)
At line:1 char:1

  • Get-WmiObject Win32_ComputerSystem -ComputerName myServer ...
  • ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  • CategoryInfo : InvalidOperation: (:) [Get-WmiObject], COMException
  • FullyQualifiedErrorId : GetWMICOMException,Microsoft.PowerShell.Commands.GetWmiObjectCommand

If I use pass the child1 domain user credential like following

$child1usr = Get-Credential
Get-WmiObject Win32_ComputerSystem -ComputerName myServer -Credential $child1usr

It works well.

I also checked myServer and confirmed the Windows Firewall is turned off for all profiles. Based on the result, it seems more like a security setting. Any suggestions?

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,775 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Daisy Zhou 20,791 Reputation points Microsoft Vendor
    2020-09-22T02:15:02.777+00:00

    Hello @J. L ,

    Thank you for posting here.

    When the client is in child2 domain, what do you define the "myserver" in the following command?
    Get-WmiObject Win32_ComputerSystem -ComputerName myServer

    In my lab, if I define the incorrect server name I will get the same error message as you.

    26278-rpc2.png

    Here is the successful result.

    26312-rpc3.png

    We can try to troubleshoot the issue based on the following two similar case.

    The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)
    https://sqlpowershell.blog/2016/05/25/the-rpc-server-is-unavailable-exception-from-hresult-0x800706ba/

    Get-WmiObject : The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)
    https://stackoverflow.com/questions/11330874/get-wmiobject-the-rpc-server-is-unavailable-exception-from-hresult-0x800706/11338825

    If it does not work above, we can try to capture the netmom traffice for good netmom traffice and bad netmom traffice.

    Then compare the RPC protocal for both netmom traffice. It looks like this.
    26260-rpc1.png

    About how to capture network monitor traffic:

    1. Choose the version for your system to download, install it as typical: https://www.microsoft.com/en-US/download/details.aspx?id=4865
    2. Run Network Monitor as administrator.
    3. In the bottom left-hand, choose the NIC or NICs you want to capture.
    4. Run command: ipconfig /flushdns to clean DNS cache, and nbtstat -RR to clean NETBIOS cache, run klist purge command.
    5. Then Start capture after we reproduce the issue. After the necessary information is collected, click Stop button.
    6. Save the captured files.

    Best Regards,
    Daisy Zhou

    0 comments No comments