Re: Event 4311, Source:netBT after applying latest patches

From: Magoo (magoo-nospam_at_hotmail.com)
Date: 05/03/05 

Date: Mon, 2 May 2005 15:05:20 -0700

MS admitted was a bug in the patch. Problem solved !

"Derek Fradsham" <fradnik@hotmail.com> wrote in message
news:uGvwxVzRFHA.248@TK2MSFTNGP15.phx.gbl...
> I have a customer who reported this exact same problem (yesterday) on
> several of his servers. Background:
>
> All Windows 2003 member servers in 2003 AD - no SP1
> Some are SAN attached
> Various apps running on servers, EPO, IIS/Coldfusion
> upon reboot, very slow to get to logon screen, most of the time spent at
> "preparing network connections"
> Cannot ping the machine until after a logon.
> 4311 event in log.
>
> I am having them check to see what patches were recently installed, and to
> run an AV & spyware check, as this sounds like either a MS patch screwup
or
> an infestation.
>
> Please respond with anything found.
>
> Derek
>
> "Magoo" <nospammagoo@hotmail.com> wrote in message
> news:%23Dp1NygQFHA.2132@TK2MSFTNGP14.phx.gbl...
> > In 3 out of 5 Win2003 servers, SAN connected, I applied latest patches
> > 842773, 890859, 893086, 890923 and on event I got error:
> > Event:4311, source:netbt
> >
> > Basically servers get no IP address and a "Run time error" message box
> > appears after Windows startup.
> >
> > In one server I attempted to remove TCP/IP protocol, and reinstall it
but
> > that did not improve the situation. I removed patches, but that did not
> > fix the problem either. I confirmed that on the affected three servers
> > event 4311 was inexistent prior to patch deployment last night.
> >
> > If anyone there has seen similar problem please let me know.
> >
>
>

Relevant Pages

  • Re: problems with KB951746
    ... Do any of the four servers run *without* ISA? ... What I suspect is happening is that the patch is doing what it is supposed to do. ... If your firewall is not configured to allow DNS traffic from a random source port then your recursive DNS requests are being stopped at the firewall...and you'll get the symptoms you describe. ... It is also possible, but less likely, that your ISP's DNS servers are misconfigured and are unable to reply on odd source ports. ...
    (microsoft.public.windows.server.sbs)
  • Best Practice re: patching multiple Sun Servers connected to a Hitachi SAN
    ... All Sun Servers are using Solaris 8 with Veritas Volume Manager 3.2 to ... Hitachi 9200 are under Veritas control and use VxFS filing system with large ... 8_recommended patch cluster with a date stamp of 4/20/2004. ... to install the patch cluster in single user mode with my mirrors detached ...
    (comp.unix.solaris)
  • Re: [Full-Disclosure] DCOM RPC exploit (dcom.c)
    ... But you'd still patch either way, ... of home users who don't even know what a security patch *IS*, ... But how many organisations firewall off internal servers from ... administrators have the time to watch the IDS given the number of patches they ...
    (Full-Disclosure)
  • Re: KB917537 Failing
    ... I honestly hand patch servers... ... Windows Server 2003 Hotfix KB917537 installation failed. ... The consensus among the MVPs is that SBS'ers should reboot after patch ...
    (microsoft.public.windows.server.sbs)
  • Re: KB917537 Failing
    ... This patch worked just fine on all my servers but it's obviously having issues with some servers. ... possible installer issue with the IIS patch ... To add insult to injury, if you hit the "Restart" button in the patch success dialog box rather than clicking "Later" and doing the restart manually, it fails to make the appropriate entry in the system log to document the reason for shutdown. ...
    (microsoft.public.windows.server.sbs)