Re: Event 4311, Source:netBT after applying latest patches

From: Derek Fradsham (fradnik_at_hotmail.com)
Date: 04/22/05 

Date: Fri, 22 Apr 2005 09:18:49 -0300

I have a customer who reported this exact same problem (yesterday) on
several of his servers. Background:

All Windows 2003 member servers in 2003 AD - no SP1
Some are SAN attached
Various apps running on servers, EPO, IIS/Coldfusion
upon reboot, very slow to get to logon screen, most of the time spent at
"preparing network connections"
Cannot ping the machine until after a logon.
4311 event in log.

I am having them check to see what patches were recently installed, and to
run an AV & spyware check, as this sounds like either a MS patch screwup or
an infestation.

Please respond with anything found.

Derek

"Magoo" <nospammagoo@hotmail.com> wrote in message
news:%23Dp1NygQFHA.2132@TK2MSFTNGP14.phx.gbl...
> In 3 out of 5 Win2003 servers, SAN connected, I applied latest patches
> 842773, 890859, 893086, 890923 and on event I got error:
> Event:4311, source:netbt
>
> Basically servers get no IP address and a "Run time error" message box
> appears after Windows startup.
>
> In one server I attempted to remove TCP/IP protocol, and reinstall it but
> that did not improve the situation. I removed patches, but that did not
> fix the problem either. I confirmed that on the affected three servers
> event 4311 was inexistent prior to patch deployment last night.
>
> If anyone there has seen similar problem please let me know.
>

Relevant Pages

  • ePolicy Orchestrator 3.5 hangs when browsing Domain controller properties
    ... We use Mcafee ePO 3.5 on a win2003 server- in our ePO directory we have ... a couple of sites- which contain member servers, workstations and ... domain controllers and Exchange servers. ... Mcafee support reckon it's not an ePO problem. ...
    (alt.comp.anti-virus)
  • Re: All-in-one Spam/Virus Solution
    ... McAfee is a good replacement for TrendMicro antivirus and you can manage it with EPO if you want. ... 1) there technical support is horrible and seems like ... workstations, servers, and email would be considered as well. ...
    (Security-Basics)
  • Re: Event 4311, Source:netBT after applying latest patches
    ... MS admitted was a bug in the patch. ... > I have a customer who reported this exact same problem on ... > Various apps running on servers, EPO, IIS/Coldfusion ... I removed patches, but that did not ...
    (microsoft.public.win2000.security)
  • Re: Protection pilot vs epo
    ... PP vs Epo, there are big differences. ... With PP you can centrally manage clients, deployments and some more but not ... 150-200 servers, ...
    (microsoft.public.windows.server.sbs)