Hi Tero,
Based on your idea, I did the following and it appears to have worked.
First, I set up a local administrator account on an XP workstation. I then renamed the workstation to the phantom server name (SERVER1) that the system log was complaining about in error 10009. I noticed that SERVER1 now showed up in the SBS console under Client Computers. I tried to delete SERVER1 using the Console, but it wouldn't allow me, saying an error occurred.
Next, I went to ADUC and moved SERVER1 from SBSComputers into the SBS Servers OU. Back at the refreshed SBS Console, I saw that SERVER1 was now up in the Servers section, but there was no Remove option available. I went back to ADUC and deleted SERVER1 there.
I then logged onto the phony SERVER1 machine with my local account and moved it from the domain to a workgroup. In the workgroup, I renamed it, rebooted it and then rejoined it back to the domain using its original workstation name.
I checked this morning and (finally!) there was no 10009 DCOM message at 2:06AM!
Hope this helps someone.
Regards,
Bs.