RE: WINS Error 4204

Hi Johnny and Jim,

Thanks for you posting here.

The event will not cause any problem, we may just ignore it safely. And
also I would like to give some suggestion to resolve the issue:

Suggestion 1:
==================
First, please double check to make sure that you have set the following
registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wins\Parameters
Entry Value Name: UseSelfFndPnrs
Data type: REG_DWORD
Value: 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wins\Parameters
Entry Value Name: McastIntvl
Data type: REG_DWORD
Value: FFFFFFFF

Note: The locate is under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet"
instead of "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001". Make sure that the
UseSelfFndPnrs is set to 1 instead of 0.

After you modify the changes, make sure that you have restarted the
computer to make the changes take effect.

Try to test, how about the result?

Suggestion 2:
==================
You may test if your WINS server works properly by using the nblookup.exe
utility.
1. Download and extract the nblookup.exe utility from the link below:
http://support.microsoft.com/default.aspx?scid=kb;en-us;830578

2. On a client, make sure that the WINS server's first IP address is used
as the Primary WINS server. Then open a command prompt window, run the
following command to test the record:
nblookup <computerName>

How about the result?

Suggestion 3:
==================
Please make the following registry modifications:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WINS\Parameters McastIntvl
= 0X0FFFFFFF
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WINS\Parameters
UseSelfFndPnrs = 1

With this method, we set the interval of the WINS auto-discover to a large
number. Please test to check if the problem still occurs every 40 minutes.
In addition, as I know, there is no way however, to prevent the WINS
service from sending the multicast packet on startup of the WINS service as
this is by design. Please check with Netgear to disable the multicast on
the router and test to see if the problem can be resolved.

Suggestion 4:
==================
For further research, please help me capture the netmon trace on the server:
1. Download ftp://ftp.microsoft.com/pss/tools/NetMon/NETMON2.ZIP (the
passwordfor the .zip file is "trace") and install it?
2. Run Network Monitor on the server, and then follow the steps below to
configure the correct parameters:
a. Click Capture -> Buffer Settings, and then set the Buffer Size to 30 MB.
b. Click Capture -> Networks, and then expand the Local Computer node. Make
sure you select the correct network card (judging from the MAC address).
Click the Start Capture button.
3. Make sure the problem occurs. Then click the Stop Capture button to stop
netmon capture.
7. Take a look at Captured Statistics. If the buffer utilization is 100%,
it means some packets are dropped because buffer is not big enough. Please
enlarge the buffer size and repeat the capture procedure.
8. Save and compress the netmon trace files and send the files to
v-yanniw@xxxxxxxxxxxxxx In addition, let me know the IP addresses of the
server.

Hope above information helps! I appreciate you time and effort. I am
currently standing by for you about the test result. I am always happy to
be of further assistance.

Have a nice day!

Best Regards,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: WINS Error 4204
>thread-index: AcWoWttDvPZ7hK/STRCXHJ4G6Z6BCw==
>X-WBNR-Posting-Host: 68.7.125.222
>From: "=?Utf-8?B?Sm9obm55IEI=?=" <JohnnyB@xxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <BBE8DB15-A617-4F55-8467-6F5ECE3E62F1@xxxxxxxxxxxxx>
<KBjWQCmkFHA.3672@xxxxxxxxxxxxxxxxxxxxx>
<E7DDD86F-BAF8-4C91-8AD5-B0ABCEAADDA7@xxxxxxxxxxxxx>
<6sR#186pFHA.1028@xxxxxxxxxxxxxxxxxxxxx>
>Subject: RE: WINS Error 4204
>Date: Tue, 23 Aug 2005 20:21:02 -0700
>Lines: 24
>Message-ID: <C93A7AAF-6782-4AD6-A54E-DAEBA5ECC51B@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147227
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>If the issue persists, please help me collect some information to isolate
>the issue:
>
>1. What is your network environment? SBS 20003 or just Windows 2003 hosts
>DNS server?
>I would say SBS since I am running DHCP, DNS, and WINS along with Files.
>2. Could you find any other error log in Event Viewer?
>No.
>Do you get event error about 40960 and 40961?
>No.
>3. How many Nics installed in the server?
>One.
>And what is the accurate brand of network adapter?
>SiS 900-Based PCI Ether Net Fast, comes on the Main Borad, ASUS P4800D-X
>4. Have you installed exchange server in the domain?
>No.
>5. Have you installed any Anti-virus software or third-party application?
>McAfee Enterprise 8.0i Anti-virus application. I have had this installed
>before with no problems, and have no problems with it at work, which is a
lot
>bigger than my home lab setup.
>
>What do you suggest for the next step?
>
>
>

.