Re: Since SP2 I get Event 4321 every 5 minutes in the Event log
From: Bob Qin [MSFT] (bobqin_at_online.microsoft.com)
Date: 08/25/04
- Next message: Len Segal: "Re: transfer of registration"
- Previous message: Darrell Gorter[MSFT]: "Re: XP OEM And SP2 Activation"
- In reply to: Vic Russell: "Re: Since SP2 I get Event 4321 every 5 minutes in the Event log"
- Next in thread: Vic Russell: "Re: Since SP2 I get Event 4321 every 5 minutes in the Event log"
- Reply: Vic Russell: "Re: Since SP2 I get Event 4321 every 5 minutes in the Event log"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 25 Aug 2004 02:09:01 GMT
Hi Vic,
Yes, you are right. The Event: 4321 Source: netBT is a little-known netBT
message that results whenever the workstation is attempting to register its
netBIOS name either by broadcast or directly with WINS and it receives a
"name in use" response.
You can search the netbios name in the WINS server. There should be another
workstation or workgroup record in WINS with the same name as this
workstation was trying to register. The WINS server was refusing the
registration, so its IP address showed up in the netBT 4321 error as the
server preventing the registration.
To make the event go away delete the duplicate WINS record and choose a
different name for either the workgroup or the workstation.
Regards,
Bob Qin
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
From: "Vic Russell" <nospam@nospam.com>
Subject: Re: Since SP2 I get Event 4321 every 5 minutes in the Event
log
Date: Tue, 24 Aug 2004 13:15:27 +0100
Newsgroups: microsoft.public.windowsxp.setup_deployment
Thanks for that Bob,
However, I'm still a little confused. I assume you mean WINS on the
machine
137.223.3.99 which is the one that "did not allow the name to be
claimed by
this machine" - see below. However, I can not find any reference to
the
137.223.3.133 machine in WINS on that server.
Can you explain what I may be doing wrong or mis-understanding?
Kind regards,
Vic
============================================================================
==============
Event Type: Error
Event Source: NetBT
Event Category: None
Event ID: 4321
Date: 24/08/2004
Time: 13:09:10
User: N/A
Computer: PI-104
Description:
The name "MICROSEC :1d" could not be registered on the
Interface with
IP address 137.223.3.133. The machine with the IP address
137.223.3.99 did
not allow the name to be claimed by this machine.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 04 00 56 00 ......V.
0008: 00 00 00 00 e1 10 00 c0 ....á..À
0010: 01 01 00 00 01 00 00 c0 .......À
0018: 45 00 00 00 00 00 00 00 E.......
0020: 00 00 00 00 00 00 00 00 ........
============================================================================
==============
"Bob Qin [MSFT]" <bobqin@online.microsoft.com> wrote in message
news:Rj1OqFciEHA.3724@cpmsftngxa10.phx.gbl...
> Hi Vic,
>
> Thanks for your posting here.
>
> This problem may be caused by a NetBIOS name conflict between the
> workstation and either another workstation with the same NetBIOS
name, or
> a
> workgroup or domain with the same NetBIOS name as the workstation.
>
> To resolve this problem, you can try one of the following:
>
> - Change the NetBIOS name of the workstation.
> - Delete the conflicting NetBIOS name in Windows Internet Naming
Service
> (WINS).
>
> Have a nice day!
>
> Regards,
> Bob Qin
> Microsoft Online Partner Support
>
> Get Secure! - www.microsoft.com/security
>
> ====================================================
> When responding to posts, please "Reply to Group" via your
newsreader so
> that others may learn and benefit from your issue.
> ====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> --------------------
> From: "Vic Russell" <nospam@nospam.com>
> Subject: Since SP2 I get Event 4321 every 5 minutes in the
Event log
> Date: Mon, 23 Aug 2004 08:17:08 +0100
> Newsgroups: microsoft.public.windowsxp.setup_deployment
>
> Hi,
>
> On my office laptop I am now getting Event 4321 every 5
minutes. I
> have
> disabled the firewall because we are behind an office ISA.
>
> The event reads:-
>
> Event Type: Error
> Event Source: NetBT
> Event Category: None
> Event ID: 4321
> Date: 23/08/2004
> Time: 07:25:37
> User: N/A
> Computer: PI-104
> Description:
> The name "MICROSEC :1d" could not be registered on the
> Interface with
> IP address 137.223.3.133. The machine with the IP address
> 137.223.3.99 did
> not allow the name to be claimed by this machine.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> I have tried to research this but none of the solutions
mentioned
> seem to
> lead anywhere. Any ideas?
>
> Regards,
>
> Vic Russell
>
>
>
>
- Next message: Len Segal: "Re: transfer of registration"
- Previous message: Darrell Gorter[MSFT]: "Re: XP OEM And SP2 Activation"
- In reply to: Vic Russell: "Re: Since SP2 I get Event 4321 every 5 minutes in the Event log"
- Next in thread: Vic Russell: "Re: Since SP2 I get Event 4321 every 5 minutes in the Event log"
- Reply: Vic Russell: "Re: Since SP2 I get Event 4321 every 5 minutes in the Event log"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
