The error "Remote procedure call failed" issue might be caused due to one of the following reasons:
- Due to “Remote Procedure Call” service not running.
- Due to corrupted System Files.
- Due to third party security software.
Checking the event viewer to know the cause of the issue. Make sure “Remote Procedure Call” service is started and running.
In this case, the Network Providers ZenCredManager and LCredMgr seem to not be able to handle an event initiated by the Defender provider during login and causes lsass.exe (netlogon service) to crash, without the netlogon service running the computer restarts.
If the providers are removed from the following registry key then Defender is able to login:
(the default value on a windows 7 computer is string "RDPNP,LanmanWorkstation,webclient")
Novell ZenWorks computers with version 11.3 (tested with 18.104.22.168407) have 2 providers it seems: ZenCredManager and LCredMgr. Both must be removed from ProviderOrder.
There is a group policy setting that enables the Notify functionality to be disabled for specific network providers, that is NPLogonNotify and NPPasswordChangeNotify will not be called for these providers.
The value is "Blocked Network Providers", the data is the names of network providers to block separated by commas for example:
Blocked Network Providers=LCredMgr
Navigate to the Registry registry/group policy setting and add the Blocked Network Providers:
HKLM\SOFTWARE\Policies\PassGo Technologies\Defender\Defender GINA\Blocked Network Providers="ZenCredManager,LCredMgr"