Vista - Network Event ID 4321

I had a perfectly functioning Network, 4 XP machines and a LinkSys WRT350N Storage Link Gigabit router.

In May I took out 1 XP machine and replaced it with a Vista Home Premium 64 bit system.

Had a few problems getting everyone to see each other and had to add a service to the 3 XP machines to get going. Almost everything is OK, or at least I can work around it.

For months I had battled a single problem, this Vista computer's NET VIEW would NOT show itself in the output? The XP machines all appeared as well as the Router in the NET VIEW output. The router, since it is Storage link model has in its set-up a workgroup name. Finally tried some stuff and determined it was the ROUTER doing in the Vista system. Using BROWSTAT I noticed that the Router was the Master Browser! So I moved the Router to a different workgroup name. That solved the NET VIEW problem! Great. Using the /DOMAIN:workgroup parameter on NET VIEW I can access the router's storage on all systems.

However, there is one PERSISTENT problem remaining. I can't get rid of the Event ID:4321 error that appears every 10 minutes...

I've searched the web and tried every remedy and checked and re-checked all settings.

Right now, I'm running with ONLY 1 XP machine on with this Vista machine.

Net View output :

=======================
C:\Windows\system32>net view
Server Name Remark

---------------------------------------
\\IRV-XPS435 Irv's XPS 435T
\\LARAINE-HP Laraine-HP
The command completed successfully.
======================

IRV-XPS435 is 192.168.1.100 and LARAINE-HP is 192.168.1.101.

The Event ID:4321 text :

============================
Log Name: System
Source: netbt
Date: 10/4/2009 9:46:49 AM
Event ID: 4321
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Irv-XPS435
Description:
The name "LARAINE-HP :0" could not be registered on the interface with IP address 192.168.1.100. The computer with the IP address 192.168.1.101 did not allow the name to be claimed by this computer.
===========================

BROWSTAT output

=================
K:\Inet DL>browstat view 1
Remoting NetServerEnum to \\LARAINE-HP on transport \Device\NetBT_Tcpip_{819811D
5-D0FA-41E2-9DC7-92A9F404CFCA} with flags ffffffff
2 entries returned. 2 total. 31 milliseconds

\\IRV-XPS435 NT 06.00 (W,S,PQ,NT) Irv's XPS 435T
\\LARAINE-HP NT 05.01 (W,S,PQ,NT,PBR,MBR) Laraine-HP

K:\Inet DL>browstat gm 1 home
Master Browser: LARAINE-HP
=================

IRV-XPS435 is not the Master Browser nor a potention browser? Why would it try claiming to be?

I do see an error in BROWSTAT but do not understand it?

====================

K:\Inet DL>browstat sta -v home


Status for domain home on transport \Device\NetBT_Tcpip_{819811D5-D0FA-41E2-9DC7
-92A9F404CFCA}
Browsing is active on domain.
Master browser name is: LARAINE-HP
Could not open key in registry, error = 5 Unable to determine build of br
owser master: 5
\\\\LARAINE-HP . Version:05.01 Flags: 51203 NT POTENTIAL MASTER
1 backup servers retrieved from master LARAINE-HP
\\LARAINE-HP
There are 2 servers in domain home on transport \Device\NetBT_Tcpip_{819811D
5-D0FA-41E2-9DC7-92A9F404CFCA}
Number of NT Advanced Servers: 0
Number of OS/2 Domain controllers: 0
Number of Windows For Workgroups machines: 0
Number of Os/2 machines: 0
Number of NT machines: 2

Number of active WfW browsers: 0
Number of browsers: 1
Number of backup browsers: 0
Number of master browsers: 1
There are 2 domains in domain home on transport \Device\NetBT_Tcpip_{819811D
5-D0FA-41E2-9DC7-92A9F404CFCA}
===========================

Like I said, I moved the router to a different workgroup and here is the output for that workgroup (only the router is on it) :

======================
K:\Inet DL>browstat sta -v home2


Status for domain home2 on transport \Device\NetBT_Tcpip_{819811D5-D0FA-41E2-9DC
7-92A9F404CFCA}
Browsing is active on domain.
Master browser name is: LINKSYSWRT350N
Could not connect to registry, error = 5 Unable to determine build of bro
wser master: 5
Unable to determine server information for browser master: 5
1 backup servers retrieved from master LINKSYSWRT350N
\\LINKSYSWRT350N
There are 1 servers in domain home2 on transport \Device\NetBT_Tcpip_{819811
D5-D0FA-41E2-9DC7-92A9F404CFCA}
Number of NT Advanced Servers: 0
Number of OS/2 Domain controllers: 0
Number of Windows For Workgroups machines: 0
Number of Os/2 machines: 0
Number of NT machines: 1

Number of active WfW browsers: 0
Number of browsers: 1
Number of backup browsers: 0
Number of master browsers: 1
There are 2 domains in domain home2 on transport \Device\NetBT_Tcpip_{819811
D5-D0FA-41E2-9DC7-92A9F404CFCA}
==============================

It has the same BROWSTAT problem?

Lastly some NBTSTAT output...

======================
K:\Inet DL>nbtstat -a irv-xps435

Local Area Connection:
Node IpAddress: [192.168.1.100] Scope Id: []

NetBIOS Remote Machine Name Table

Name Type Status
---------------------------------------------
IRV-XPS435 <00> UNIQUE Registered
HOME <00> GROUP Registered
IRV-XPS435 <20> UNIQUE Registered

MAC Address = 00-23-AE-E6-CD-D2


K:\Inet DL>nbtstat -a laraine-hp

Local Area Connection:
Node IpAddress: [192.168.1.100] Scope Id: []

NetBIOS Remote Machine Name Table

Name Type Status
---------------------------------------------
LARAINE-HP <00> UNIQUE Registered
HOME <00> GROUP Registered
LARAINE-HP <20> UNIQUE Registered
HOME <1E> GROUP Registered
HOME <1D> UNIQUE Registered
..__MSBROWSE__.<01> GROUP Registered

MAC Address = 00-1A-70-A4-EF-41


K:\Inet DL>nbtstat -a linksyswrt350n

Local Area Connection:
Node IpAddress: [192.168.1.100] Scope Id: []

NetBIOS Remote Machine Name Table

Name Type Status
---------------------------------------------
LINKSYSWRT350N <00> UNIQUE Registered
LINKSYSWRT350N <03> UNIQUE Registered
LINKSYSWRT350N <20> UNIQUE Registered
..__MSBROWSE__.<01> GROUP Registered
BROADNAS <BC> GROUP Registered
HOME2 <00> GROUP Registered
HOME2 <1D> UNIQUE Registered
HOME2 <1E> GROUP Registered

MAC Address = 00-00-00-00-00-00
===========================

Lastly, what the NBTSTAT cache is :

===============================

K:\Inet DL>nbtstat -c

Local Area Connection:
Node IpAddress: [192.168.1.100] Scope Id: []

NetBIOS Remote Cache Name Table

Name Type Host Address Life [sec]
------------------------------------------------------------
HOME2 <1D> UNIQUE 192.168.1.1 155
IRV-XPS435 <20> UNIQUE 192.168.1.100 452
LARAINE-HP <00> UNIQUE 192.168.1.101 467
LARAINE-HP <20> UNIQUE 192.168.1.101 227
LINKSYSWRT350N <00> UNIQUE 192.168.1.1 497
LINKSYSWRT350N <20> UNIQUE 192.168.1.1 155
=========================

I'm sure some of the above data is overload and not necessary. I hope someone has read this far.

I do NOT see any other network related errors in the event log. In the last 7 days I have gotten 399 errors total, 329 were 4321's and 59 relating to SidebySide, the sidebar which point back to NERO as having a conflict with it (and I'm not worrying about this one). Others are random minor errors that 'happen'. No significant repeating counts on warnings or informational events either?

Suggestions?

Irv S.

Maybe ....
There is a computer with the same netbios name on the network as what you just setup.
Go to Control Panel > System > Computer Name tab, click > Change button & change the computer name.

Yeah, on researching this error on the web, that is the consensus that is causing the problem. However, I've checked and double-checked this, there isn't, at least one showing. Only have 2 computers on HOME workgroup and the Router on HOME2 workgroup. Each shows the same name as the NET VIEW does for computername.

Other's solved this problem after determining it was Zone Alarm causing this. I don't run ZA but McAfee's Total Protection Suite. No reports of that causing a problem and I even disabled it to be sure. Also checked that the required ports are open on all systems on workgroup HOME.

Is it possible a Registry entry or something hidden that doesn't show in the GUI or in a command output is somehow causing this?

I wonder if this is a Vista error, but then again, I'd expect others to have this too?

More info and it sort of indicates 'what' is the problem.

Running BROWSTAT on the XP System indicates that the VISTA system is the Master Browser, but the Vista system thinks it is the XP system? How to get those 2 in sync would appear to be the problem? Now how to fix it?

Irv S.