The action to retrieve the server list for the ISA Server array "{<GUID>}" failed. The error code in the Data area of the event properties indicates the cause of the failure. The error description is: <error description>
Data:
0000: <error code>
This is a generic error and the real indicator of the problem is the actual error code (extracted from the Data portion of the event) and the error description. So only consider the suggestions applicable to the error description shown in the event:
Error: Code: 0x800706BA, Description: The RPC server is unavailable. - For general information about "RPC Server is unavailable" see the link to error codes 0x800706BA and 1722.
Error: Code: 0x80070002, Description: The Active Directory property cannot be found in the cache. - From a newsgroup post: "This may indicate a corrupt cache. Delete, and then recreate your cache file."
Error: The system cannot find the file specified. - no info
Error: Class not registered - This seems to occur together with event id 10006 from DCOM so see if the comments for that event provide some clues.
Error: Code: 0x80000050, Description: An invalid Active Directory pathname was passed - A newsgroup post indicated that ME282035 may help.
Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.
Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.