Re: WINS 4204 Every 40 Minutes

No, I understand. I have a feeling the WINS issue will persist after the
reboot, though I hope not. I'll let you know. Odd how your post suggested
changing the currentcontrolset001 reg entries and flipping the values.
Isn't that a backup set of entires from last known good boot.
I'd love the technical reasoning behind this if you have it.

Thanks!

"Steven Wang [MSFT]" <v-stwang@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:2%23fgOZFtFHA.536@xxxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> Thanks for your prompt reply. If the issue still exists after the server
> rebooted, please feel free to post back or simply send an email to me at
> v-stwang@xxxxxxxxxxxxx, I will then get back to you.
>
> Regarding your question, I suggest you don't remove the WINS server, since
> there is a Windows XP client connected to the network through VPN. If all
> Win XP clients are local clients, it is not necessary to run WINS server,
> because of that if there is any NetBIOS name query request from client
> computer, the NetBIOS name can be resolved by sending NetBIOS broadcast.
> However, if the client computer is connected to the network through VPN,
> the NetBIOS broadcast will not work, so that we still need the WINS
> server.
>
> If anything is unclear or you need any more information, please feel free
> to let me know. It has been a pleasure to work with you.
>
> Have a nice day!
>
> Steven Wang (MSFT)
> Microsoft CSS Online Newsgroup Support
>
> --------------------
>>NNTP-Posting-Date: Wed, 07 Sep 2005 20:14:54 -0500
>>From: "Anonymous" <someone@xxxxxxxxxxxxxxx>
>>Newsgroups: microsoft.public.windows.server.sbs
>>Subject: Re: WINS 4204 Every 40 Minutes
>>Date: Wed, 7 Sep 2005 21:14:52 -0400
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>X-RFC2646: Format=Flowed; Original
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>Message-ID: <o-OdnYnycOMTDYLeRVn-iA@xxxxxxxxxxx>
>>Lines: 370
>>NNTP-Posting-Host: 24.34.37.174
>>X-Trace:
> sv3-5hIc/ooe0kn184QHVWfuKEjqGuWz8ocDByn7iz6EiZ2xbPrgVZrV2FOq1EYalnGEWLQDY6NL
> T3ulqCG!50u5smiYJw1ke1llU9DZ5zkNorjMwU72kRlSBouUukhel0Zfo1FkoskWckTXOmLcaudh
> zu6pizJe!afsDeA==
>>X-Complaints-To: abuse@xxxxxxxxxxx
>>X-DMCA-Complaints-To: dmca@xxxxxxxxxxx
>>X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
>>X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
> complaint properly
>>X-Postfilter: 1.3.32
>>Path:
> TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.
> sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!border1.nntp.dca.g
> iganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.comcast.com
> !news.comcast.com.POSTED!not-for-mail
>>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:203042
>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>
>>OK, I just made the changes. The server will not be rebooted for a couple
>>of weeks so if it needs to reboot, I'll have no updates until then.
>>
>>Do I even need WINS in the environment I described below? Please let me
>>know..
>>
>>Thanks!
>>
>>"Steven Wang [MSFT]" <v-stwang@xxxxxxxxxxxxxxxxxxxx> wrote in message
>>news:Dd0PLD7sFHA.1208@xxxxxxxxxxxxxxxxxxxxxxxx
>>> Hi,
>>>
>>> I do understand your concern, and it is really frustrated.
>>>
>>> I have performed a lot of research, and I have found that we may prevent
>>> WINS server from sending the multicast packages by modifying the
> following
>>> registry keys:
>>>
>>> [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WINS\Parameters]
>>>
>>> McastIntvl = 0X0FFFFFFF
>>> UseSelfFndPnrs = 1
>>>
>>> Note that the path of the key has been changed from CurrentControlSet to
>>> ControlSet001, and the two values data are all changed.
>>>
>>> Hope this helps, and I look forward to hearing from you. Thank you for
>>> your time and it is my pleasure to work with you on this issue!
>>>
>>> Have a nice day!
>>>
>>> Steven Wang (MSFT)
>>> Microsoft CSS Online Newsgroup Support
>>>
>>> --------------------
>>>>NNTP-Posting-Date: Tue, 06 Sep 2005 21:19:24 -0500
>>>>From: "Anonymous" <someone@xxxxxxxxxxxxxxx>
>>>>Newsgroups: microsoft.public.windows.server.sbs
>>>>References: <Ru6dncOTjINrKYbeRVn-sA@xxxxxxxxxxx>
>>> <GmeEO0fsFHA.3308@xxxxxxxxxxxxxxxxxxxxx>
>>> <JOOdnYNJdKsF7YHeRVn-uw@xxxxxxxxxxx>
>>> <ltgNPbosFHA.1208@xxxxxxxxxxxxxxxxxxxxx>
>>> <76qdnSLRTtFIF4DeRVn-2Q@xxxxxxxxxxx>
>>>>Subject: Re: WINS 4204 Every 40 Minutes
>>>>Date: Tue, 6 Sep 2005 22:19:09 -0400
>>>>X-Priority: 3
>>>>X-MSMail-Priority: Normal
>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>X-RFC2646: Format=Flowed; Response
>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>Message-ID: <YuCdnbH9X_-x04PeRVn-tQ@xxxxxxxxxxx>
>>>>Lines: 255
>>>>NNTP-Posting-Host: 24.34.37.174
>>>>X-Trace:
>>>
> sv3-Vr7zBt0I58F+lkyiZJ9Q74xOaLypfwm8Qjhi/8ewSyLvPuXUilpatbdHk+422UWlU9Ns+xZv
>>>
> sAv7r6j!1Lri3sc6zptpUJshMljFeHXmMPwCzBFLv7NUeydTdBtq4UpI/ssaacE0dloYRtSjUPpB
>>> pRH2myAv!ZPRSJQ==
>>>>X-Complaints-To: abuse@xxxxxxxxxxx
>>>>X-DMCA-Complaints-To: dmca@xxxxxxxxxxx
>>>>X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
>>>>X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
>>> complaint properly
>>>>X-Postfilter: 1.3.32
>>>>Path:
>>>
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
>>>
> ne.de!border2.nntp.dca.giganews.com!border1.nntp.dca.giganews.com!nntp.gigan
>>>
> ews.com!local01.nntp.dca.giganews.com!nntp.comcast.com!news.comcast.com.POST
>>> ED!not-for-mail
>>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:151341
>>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>>
>>>>Hi Steve,
>>>>
>>>>I just don't get it. We put in the registry changes exactly as Microsoft
>>>>recommends and I'm still getting the WINS error every 40 minutes. The
>>> part
>>>>that really blows my mind is that this is a very standard install of SBS
>>>>2003. I didn't do any thing different than my other installs. All
>>> service
>>>>packs and updates are installed and I've never messed with WINS. Do I
>>> even
>>>>need it running. The error is very annoying. I have 3 local XP Pro
>>> clients
>>>>and 1 XP Pro client that comes in via a VPN. That's it.
>>>>
>>>>Please help. Thanks!
>>>>
>>>>
>>>>"Anonymous" <someone@xxxxxxxxxxxxxxx> wrote in message
>>>>news:76qdnSLRTtFIF4DeRVn-2Q@xxxxxxxxxxxxxx
>>>>> OK, we are rebooting this morning...
>>>>>
>>>>> "Steven Wang [MSFT]" <v-stwang@xxxxxxxxxxxxxxxxxxxx> wrote in message
>>>>> news:ltgNPbosFHA.1208@xxxxxxxxxxxxxxxxxxxxxxxx
>>>>>> Hi,
>>>>>>
>>>>>> Thanks for your reply!
>>>>>>
>>>>>> The server needs to be restarted to make the registry changes effect.
>>> If
>>>>>> the issue still exists after the next reboot of the server, please
> feel
>>>>>> free to let me know.
>>>>>>
>>>>>> Have a nice day!
>>>>>>
>>>>>> Steven Wang (MSFT)
>>>>>> Microsoft CSS Online Newsgroup Support
>>>>>>
>>>>>>
>>>>>> --------------------
>>>>>>>NNTP-Posting-Date: Mon, 05 Sep 2005 11:21:44 -0500
>>>>>>>From: "Anonymous" <someone@xxxxxxxxxxxxxxx>
>>>>>>>Newsgroups: microsoft.public.windows.server.sbs
>>>>>>>References: <Ru6dncOTjINrKYbeRVn-sA@xxxxxxxxxxx>
>>>>>> <GmeEO0fsFHA.3308@xxxxxxxxxxxxxxxxxxxxx>
>>>>>>>Subject: Re: WINS 4204 Every 40 Minutes
>>>>>>>Date: Mon, 5 Sep 2005 12:21:32 -0400
>>>>>>>X-Priority: 3
>>>>>>>X-MSMail-Priority: Normal
>>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>>Message-ID: <JOOdnYNJdKsF7YHeRVn-uw@xxxxxxxxxxx>
>>>>>>>Lines: 152
>>>>>>>NNTP-Posting-Host: 24.34.37.174
>>>>>>>X-Trace:
>>>>>>
>>>
> sv3-r56IY+cqEyouoK1QOzQKIJ49s0h66jsJ3bTK0aOllIehxkI8x7difwJLsROp5UQcGdwwtOtv
>>>>>>
>>>
> mnWdi27!HLGZ7z18DG1HP7YoYOmyIcjVmmwPWATcKzpsY6h9xbP3a0X2f0zcycJhSe86wMqD0lc6
>>>>>> O9H3cCo4!utWSWA==
>>>>>>>X-Complaints-To: abuse@xxxxxxxxxxx
>>>>>>>X-DMCA-Complaints-To: dmca@xxxxxxxxxxx
>>>>>>>X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL
>>>>>>>headers
>>>>>>>X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
>>>>>> complaint properly
>>>>>>>X-Postfilter: 1.3.32
>>>>>>>Path:
>>>>>>
>>>
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
>>>>>>
>>>
> ne.de!border2.nntp.dca.giganews.com!border1.nntp.dca.giganews.com!nntp.gigan
>>>>>>
>>>
> ews.com!local01.nntp.dca.giganews.com!nntp.comcast.com!news.comcast.com.POST
>>>>>> ED!not-for-mail
>>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>>>>>microsoft.public.windows.server.sbs:150881
>>>>>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>>>>>
>>>>>>>I had tried this before, but noticed that there was a typo on one of
>>>>>>>the
>>>>>>>registry entries. I've now corrected it but assume the changes won't
>>>>>>>go
>>>>>> in
>>>>>>>affect until the next reboot. I hope this works.
>>>>>>>
>>>>>>>Thanks!
>>>>>>>
>>>>>>>"Steven Wang [MSFT]" <v-stwang@xxxxxxxxxxxxxxxxxxxx> wrote in message
>>>>>>>news:GmeEO0fsFHA.3308@xxxxxxxxxxxxxxxxxxxxxxxx
>>>>>>>> Hello,
>>>>>>>>
>>>>>>>> Thank you for posting.
>>>>>>>>
>>>>>>>> From your post, my understanding of this issue is: you're
>>> experiencing
>>>>>>>> is
>>>>>>>> your WINS is running on a SBS 2003 server is generated an event
> every
>>>>>>>> 40
>>>>>>>> minutes. Event Source: Wins, Event ID: 4204. If this is not
>>>>>>>> correct,
>>>>>>>> please feel free to let me know.
>>>>>>>>
>>>>>>>> Based on my research, I have found that when the WINS service is
>>>>>>>> started
>>>>>>>> on
>>>>>>>> Windows NT Technology based server, it automatically sends IGMP
>>> packets
>>>>>> to
>>>>>>>> multicast address 224.0.1.24. This is a multicast packet sent by
> the
>>>>>> WINS
>>>>>>>> service looking for possible replication partners. WINS
> periodically
>>>>>>>> sends
>>>>>>>> information about itself by means of these packets. If you do not
>>> want
>>>>>>>> these multicast packets to be sent, set UseSelfFndPnrs in the
>>>>>>>> registry
>>>>>>>> under the following key to DWORD 0 and also set McastIntvl to some
>>> huge
>>>>>>>> value (DWORD FFFFFFFF for instance; by default the interval is
>>>>>>>> 2400,
>>>>>>>> that
>>>>>>>> is, 40 minutes).
>>>>>>>>
>>>>>>>> Use the Registry Editor to set the UseSelfFndPnrs and McastIntvl
>>>>>>>> entries
>>>>>>>> under the following Registry key:
>>>>>>>> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wins\Parameters
>>>>>>>>
>>>>>>>> For more information about this issue, please refer to the
>>>>>>>> following
>>> KB
>>>>>>>> article:
>>>>>>>> WINS Server Sends IGMP Packets on Startup
>>>>>>>> http://support.microsoft.com/?id=151761
>>>>>>>>
>>>>>>>> In addition, if there are only Windows XP Pro workstations in the
>>>>>> network,
>>>>>>>> I think it's unnecessary to run WINS server in the network. WINS
> is
>>>>>>>> a
>>>>>>>> NetBIOS name resolution service that allows client computers to
>>>>>>>> register
>>>>>>>> their NetBIOS names and IP addresses in a dynamic, distributed
>>> database
>>>>>>>> and
>>>>>>>> to resolve the NetBIOS names of network resources to their IP
>>>>>>>> addresses.
>>>>>>>> WINS is needed in any Microsoft Windows network environment that
>>>>>>>> includes
>>>>>>>> operating systems or applications that rely on NetBIOS. Since only
>>>>>>>> operating systems earlier than Windows 2000 rely on NetBIOS, WINS
>>>>>>>> server
>>>>>>>> is
>>>>>>>> only needed for operating systems that earlier than Windows 2000.
>>>>>>>>
>>>>>>>> However, for the compatibility and performance reason, I suggest we
>>>>>>>> do
>>>>>> not
>>>>>>>> disable the WINS server, as some applications may still use NetBIOS
>>>>>>>> name.
>>>>>>>>
>>>>>>>> If you have any questions or concerns related to this issue, please
>>> let
>>>>>> me
>>>>>>>> know.
>>>>>>>>
>>>>>>>> I appreciate your time and look forward to hearing from you.
>>>>>>>>
>>>>>>>> Best regards,
>>>>>>>>
>>>>>>>> Steven Wang (MSFT)
>>>>>>>> Microsoft CSS Online Newsgroup Support
>>>>>>>>
>>>>>>>> Get Secure! - www.microsoft.com/security
>>>>>>>> =====================================================
>>>>>>>> This newsgroup only focuses on SBS technical issues. If you have
>>> issues
>>>>>>>> regarding
>>>>>>>> other Microsoft products, you'd better post in the corresponding
>>>>>>>> newsgroups
>>>>>>>> so that
>>>>>>>> they can be resolved in an efficient and timely manner. You can
>>>>>>>> locate
>>>>>> the
>>>>>>>> newsgroup
>>>>>>>> here:
>>>>>>>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>>>>>>>
>>>>>>>> When opening a new thread via the web interface, we recommend you
>>> check
>>>>>>>> the
>>>>>>>> "Notify me of replies" box to receive e-mail notifications when
> there
>>>>>>>> are
>>>>>>>> any updates
>>>>>>>> in your thread. When responding to posts via your newsreader,
>>>>>>>> please
>>>>>>>> "Reply
>>>>>>>> to Group"
>>>>>>>> so that others may learn and benefit from your issue.
>>>>>>>>
>>>>>>>> Microsoft engineers can only focus on one issue per thread.
>>>>>>>> Although
>>> we
>>>>>>>> provide other
>>>>>>>> information for your reference, we recommend you post different
>>>>>>>> incidents
>>>>>>>> in different
>>>>>>>> threads to keep the thread clean. In doing so, it will ensure your
>>>>>>>> issues
>>>>>>>> are resolved
>>>>>>>> in a timely manner.
>>>>>>>>
>>>>>>>> For urgent issues, you may want to contact Microsoft CSS directly.
>>>>>>>> Please
>>>>>>>> check
>>>>>>>> http://support.microsoft.com for regional support phone numbers.
>>>>>>>>
>>>>>>>> Any input or comments in this thread are highly appreciated.
>>>>>>>> =====================================================
>>>>>>>> This posting is provided "AS IS" with no warranties, and confers no
>>>>>>>> rights.
>>>>>>>>
>>>>>>>> --------------------
>>>>>>>>>NNTP-Posting-Date: Sun, 04 Sep 2005 22:01:10 -0500
>>>>>>>>>From: "Anonymous" <someone@xxxxxxxxxxxxxxx>
>>>>>>>>>Newsgroups: microsoft.public.windows.server.sbs
>>>>>>>>>Subject: WINS 4204 Every 40 Minutes
>>>>>>>>>Date: Sun, 4 Sep 2005 23:00:59 -0400
>>>>>>>>>X-Priority: 3
>>>>>>>>>X-MSMail-Priority: Normal
>>>>>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>>>>>X-RFC2646: Format=Flowed; Original
>>>>>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>>>>>Message-ID: <Ru6dncOTjINrKYbeRVn-sA@xxxxxxxxxxx>
>>>>>>>>>Lines: 13
>>>>>>>>>NNTP-Posting-Host: 24.34.37.174
>>>>>>>>>X-Trace:
>>>>>>>>
>>>>>>
>>>
> sv3-7q7zjDuGATdh6zw7XOLhkBFkZhRZXOId2N1qI8nTOfRVjHdu4O2qcnTq72k2Xgji1dHGcr6o
>>>>>>>>
>>>>>>
>>>
> b3IqjWT!ZW34c8bugRgYQxSEtCjXzcIcKVzK7UA08EzOhY2LNAJxCTtfui+wu2qg8cx6NOHbSnR4
>>>>>>>> qz9G9f3K!1B1I8g==
>>>>>>>>>X-Complaints-To: abuse@xxxxxxxxxxx
>>>>>>>>>X-DMCA-Complaints-To: dmca@xxxxxxxxxxx
>>>>>>>>>X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL
>>>>>>>>>headers
>>>>>>>>>X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
>>>>>>>> complaint properly
>>>>>>>>>X-Postfilter: 1.3.32
>>>>>>>>>Path:
>>>>>>>>
>>>>>>
>>>
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
>>>>>>>>
>>>>>>
>>>
> ne.de!border2.nntp.dca.giganews.com!border1.nntp.dca.giganews.com!nntp.gigan
>>>>>>>>
>>>>>>
>>>
> ews.com!local01.nntp.dca.giganews.com!nntp.comcast.com!news.comcast.com.POST
>>>>>>>> ED!not-for-mail
>>>>>>>>>Xref: TK2MSFTNGXA01.phx.gbl
>>>>>>>>>microsoft.public.windows.server.sbs:150705
>>>>>>>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>>>>>>>
>>>>>>>>>Another weird issue with a recent SBS install. Very standard and
>>> small
>>>>>>>>>network with only 3 XP Pro workstations and an HP 1320N networked
>>> laser
>>>>>>>> jet
>>>>>>>>>printer. Every 40 minutes, a WINS 4204 error is logged in the
>>>>>>>>>event
>>>>>> logs.
>>>>>>>>>This is realy annoying. I've tried all the permission changes,
>>>>>>>>>etc.
>>> in
>>>>>> MS
>>>>>>>>>articles and reducing the time interval of WINS looking for
>>> replication
>>>>>>>>>parters. However, nothing has worked. I even took the 1320N
> printer
>>>>>>>>>off
>>>>>>>>>the network for a day to see if it was responding to multicast
>>>>>>>>>packets
>>>>>>>> from
>>>>>>>>>WINS. That was not the culprit. Has anyone ever seen this? Do I
>>> even
>>>>>>>> need
>>>>>>>>>WINS running?
>>>>>>>>>
>>>>>>>>>Thanks!
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>
>>
>>
>>
>


.