> Source: [sk180391](https://support.checkpoint.com/results/sk/sk180391)

# sk180391 - Output of the 'adlog a dc' command shows: "Remote procedure call failed [ntstatus=0xc002001b]"

| Property | Value |
|----------|-------|
| Solution ID | sk180391 |
| Date Created | 2022-12-13 |
| Last Modified | 2025-01-21 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * The Check Point Active Directory Log tool (the "adlog a dc" command) shows this error message on the Security Gateway:

  `Remote Procedure Call failed [ntstatus=0xc002001b]`
* The Security Gateway and the DC can exchange DCE/RPC requests and responses, and at the end the Security Gateway sends TCP\[FIN-ACK\].

  The Security Gateway does not drop the traffic.

  DC listens to LDAP connections on ports 389 (LDAP) and 135 (DCE/RPC negotiation port).
* Login Events of users from the DC do not arrive at the Security Gateway. Therefore, the users are not authenticated.

## Cause

There is an RPC connection timeout:

1. The Security Gateway is sending many requests.
2. The Security Gateway does not get a reply from the DC on time.
3. The DC answers after a long time.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content