I work with windows virtual machines a LOT.
One thing that I have noticed is that if a windows VM that has been copied, NewSided (had NewSid run on it), and has been added to a domain, it can generate a “MSDTC Event 53258” frequently.
EventID: 53258
MS DTC could not correctly process a DC Promotion/Demotion event. MS DTC
will continue to function and will use the existing security settings. Error
Specifics: d:srvrtmcomcomplusdtcdtcadmeuiname.cpp:9280, Pid: 1148
No Callstack,
CmdLine: C:WINDOWSsystem32msdtc.exe
EventID: 53258
MS DTC could not correctly process a DC Promotion/Demotion event. MS DTC
will continue to function and will use the existing security settings. Error
Specifics: %1
After a bunch of time googling, I found a solution that will make this problem go away:
1. Run the Component Services MMC snap-in: Start -> Administrative Tools ->
Component Services.
2. Open Console Root -> Component Services -> Computers.
3. Right-Click on My Computer (in the Component Services window) and click Properties.
4. Open the MSDTC tab and click OK.
5. Close the Component Services window.
6. From a Command Prompt type net stop msdtc && net start msdtc.
Now you won’t get the MSDTC errors in the event log.
I believe that this process resets the computer name that MSDTC tries to connect to. In my case it was trying to connect to the computer named “base-vm”, but that computer no longer exists.