Windows Vista Forums

Network Event ID 4321
  1. #1



    Newbie
    Join Date : May 2009
    Posts : 3
    Vista Home Premium X64
    Local Time: 08:09 AM

    Network Event ID 4321

    I had a perfectly functioning Network, 4 XP machines and a LinkSys WRT350N Storage Link Gigabit router.

    In May I took out 1 XP machine and replaced it with a Vista Home Premium 64 bit system.

    Had a few problems getting everyone to see each other and had to add a service to the 3 XP machines to get going. Almost everything is OK, or at least I can work around it.

    For months I had battled a single problem, this Vista computer's NET VIEW would NOT show itself in the output? The XP machines all appeared as well as the Router in the NET VIEW output. The router, since it is Storage link model has in its set-up a workgroup name. Finally tried some stuff and determined it was the ROUTER doing in the Vista system. Using BROWSTAT I noticed that the Router was the Master Browser! So I moved the Router to a different workgroup name. That solved the NET VIEW problem! Great. Using the /DOMAIN:workgroup parameter on NET VIEW I can access the router's storage on all systems.



    However, there is one PERSISTENT problem remaining. I can't get rid of the Event ID:4321 error that appears every 10 minutes...

    I've searched the web and tried every remedy and checked and re-checked all settings.

    Right now, I'm running with ONLY 1 XP machine on with this Vista machine.

    Net View output :

    =======================
    C:\Windows\system32>net view
    Server Name Remark

    ---------------------------------------
    \\IRV-XPS435 Irv's XPS 435T
    \\LARAINE-HP Laraine-HP
    The command completed successfully.
    ======================

    IRV-XPS435 is 192.168.1.100 and LARAINE-HP is 192.168.1.101.

    The Event ID:4321 text :

    ============================
    Log Name: System
    Source: netbt
    Date: 10/4/2009 9:46:49 AM
    Event ID: 4321
    Task Category: None
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: Irv-XPS435
    Description:
    The name "LARAINE-HP :0" could not be registered on the interface with IP address 192.168.1.100. The computer with the IP address 192.168.1.101 did not allow the name to be claimed by this computer.
    ===========================

    BROWSTAT output

    =================
    K:\Inet DL>browstat view 1
    Remoting NetServerEnum to \\LARAINE-HP on transport \Device\NetBT_Tcpip_{819811D
    5-D0FA-41E2-9DC7-92A9F404CFCA} with flags ffffffff
    2 entries returned. 2 total. 31 milliseconds

    \\IRV-XPS435 NT 06.00 (W,S,PQ,NT) Irv's XPS 435T
    \\LARAINE-HP NT 05.01 (W,S,PQ,NT,PBR,MBR) Laraine-HP

    K:\Inet DL>browstat gm 1 home
    Master Browser: LARAINE-HP
    =================

    IRV-XPS435 is not the Master Browser nor a potention browser? Why would it try claiming to be?

    I do see an error in BROWSTAT but do not understand it?

    ====================

    K:\Inet DL>browstat sta -v home


    Status for domain home on transport \Device\NetBT_Tcpip_{819811D5-D0FA-41E2-9DC7
    -92A9F404CFCA}
    Browsing is active on domain.
    Master browser name is: LARAINE-HP
    Could not open key in registry, error = 5 Unable to determine build of br
    owser master: 5
    \\\\LARAINE-HP . Version:05.01 Flags: 51203 NT POTENTIAL MASTER
    1 backup servers retrieved from master LARAINE-HP
    \\LARAINE-HP
    There are 2 servers in domain home on transport \Device\NetBT_Tcpip_{819811D
    5-D0FA-41E2-9DC7-92A9F404CFCA}
    Number of NT Advanced Servers: 0
    Number of OS/2 Domain controllers: 0
    Number of Windows For Workgroups machines: 0
    Number of Os/2 machines: 0
    Number of NT machines: 2

    Number of active WfW browsers: 0
    Number of browsers: 1
    Number of backup browsers: 0
    Number of master browsers: 1
    There are 2 domains in domain home on transport \Device\NetBT_Tcpip_{819811D
    5-D0FA-41E2-9DC7-92A9F404CFCA}
    ===========================

    Like I said, I moved the router to a different workgroup and here is the output for that workgroup (only the router is on it) :

    ======================
    K:\Inet DL>browstat sta -v home2


    Status for domain home2 on transport \Device\NetBT_Tcpip_{819811D5-D0FA-41E2-9DC
    7-92A9F404CFCA}
    Browsing is active on domain.
    Master browser name is: LINKSYSWRT350N
    Could not connect to registry, error = 5 Unable to determine build of bro
    wser master: 5
    Unable to determine server information for browser master: 5
    1 backup servers retrieved from master LINKSYSWRT350N
    \\LINKSYSWRT350N
    There are 1 servers in domain home2 on transport \Device\NetBT_Tcpip_{819811
    D5-D0FA-41E2-9DC7-92A9F404CFCA}
    Number of NT Advanced Servers: 0
    Number of OS/2 Domain controllers: 0
    Number of Windows For Workgroups machines: 0
    Number of Os/2 machines: 0
    Number of NT machines: 1

    Number of active WfW browsers: 0
    Number of browsers: 1
    Number of backup browsers: 0
    Number of master browsers: 1
    There are 2 domains in domain home2 on transport \Device\NetBT_Tcpip_{819811
    D5-D0FA-41E2-9DC7-92A9F404CFCA}
    ==============================

    It has the same BROWSTAT problem?

    Lastly some NBTSTAT output...

    ======================
    K:\Inet DL>nbtstat -a irv-xps435

    Local Area Connection:
    Node IpAddress: [192.168.1.100] Scope Id: []

    NetBIOS Remote Machine Name Table

    Name Type Status
    ---------------------------------------------
    IRV-XPS435 <00> UNIQUE Registered
    HOME <00> GROUP Registered
    IRV-XPS435 <20> UNIQUE Registered

    MAC Address = 00-23-AE-E6-CD-D2


    K:\Inet DL>nbtstat -a laraine-hp

    Local Area Connection:
    Node IpAddress: [192.168.1.100] Scope Id: []

    NetBIOS Remote Machine Name Table

    Name Type Status
    ---------------------------------------------
    LARAINE-HP <00> UNIQUE Registered
    HOME <00> GROUP Registered
    LARAINE-HP <20> UNIQUE Registered
    HOME <1E> GROUP Registered
    HOME <1D> UNIQUE Registered
    ..__MSBROWSE__.<01> GROUP Registered

    MAC Address = 00-1A-70-A4-EF-41


    K:\Inet DL>nbtstat -a linksyswrt350n

    Local Area Connection:
    Node IpAddress: [192.168.1.100] Scope Id: []

    NetBIOS Remote Machine Name Table

    Name Type Status
    ---------------------------------------------
    LINKSYSWRT350N <00> UNIQUE Registered
    LINKSYSWRT350N <03> UNIQUE Registered
    LINKSYSWRT350N <20> UNIQUE Registered
    ..__MSBROWSE__.<01> GROUP Registered
    BROADNAS <BC> GROUP Registered
    HOME2 <00> GROUP Registered
    HOME2 <1D> UNIQUE Registered
    HOME2 <1E> GROUP Registered

    MAC Address = 00-00-00-00-00-00
    ===========================

    Lastly, what the NBTSTAT cache is :

    ===============================

    K:\Inet DL>nbtstat -c

    Local Area Connection:
    Node IpAddress: [192.168.1.100] Scope Id: []

    NetBIOS Remote Cache Name Table

    Name Type Host Address Life [sec]
    ------------------------------------------------------------
    HOME2 <1D> UNIQUE 192.168.1.1 155
    IRV-XPS435 <20> UNIQUE 192.168.1.100 452
    LARAINE-HP <00> UNIQUE 192.168.1.101 467
    LARAINE-HP <20> UNIQUE 192.168.1.101 227
    LINKSYSWRT350N <00> UNIQUE 192.168.1.1 497
    LINKSYSWRT350N <20> UNIQUE 192.168.1.1 155
    =========================

    I'm sure some of the above data is overload and not necessary. I hope someone has read this far.

    I do NOT see any other network related errors in the event log. In the last 7 days I have gotten 399 errors total, 329 were 4321's and 59 relating to SidebySide, the sidebar which point back to NERO as having a conflict with it (and I'm not worrying about this one). Others are random minor errors that 'happen'. No significant repeating counts on warnings or informational events either?

    Suggestions?

    Irv S.

      My System SpecsSystem Spec

  2. #2
    lemur's Avatar

    Senior Member

    Join Date : Aug 2009
    University of Kentucky
    Posts : 1,534
    Windows Vista Enterprise x64 SP2
    Local Time: 08:09 AM
    usa us kentucky

     

    Re: Network Event ID 4321

    Maybe ....
    There is a computer with the same netbios name on the network as what you just setup.
    Go to Control Panel > System > Computer Name tab, click > Change button & change the computer name.

      My System SpecsSystem Spec

  3. #3



    Newbie
    Join Date : May 2009
    Posts : 3
    Vista Home Premium X64
    Local Time: 08:09 AM


      Thread Starter

    Re: Network Event ID 4321

    Yeah, on researching this error on the web, that is the consensus that is causing the problem. However, I've checked and double-checked this, there isn't, at least one showing. Only have 2 computers on HOME workgroup and the Router on HOME2 workgroup. Each shows the same name as the NET VIEW does for computername.

    Other's solved this problem after determining it was Zone Alarm causing this. I don't run ZA but McAfee's Total Protection Suite. No reports of that causing a problem and I even disabled it to be sure. Also checked that the required ports are open on all systems on workgroup HOME.

    Is it possible a Registry entry or something hidden that doesn't show in the GUI or in a command output is somehow causing this?

    I wonder if this is a Vista error, but then again, I'd expect others to have this too?

      My System SpecsSystem Spec

  4. #4



    Newbie
    Join Date : May 2009
    Posts : 3
    Vista Home Premium X64
    Local Time: 08:09 AM


      Thread Starter

    Re: Network Event ID 4321

    More info and it sort of indicates 'what' is the problem.

    Running BROWSTAT on the XP System indicates that the VISTA system is the Master Browser, but the Vista system thinks it is the XP system? How to get those 2 in sync would appear to be the problem? Now how to fix it?

    Irv S.

      My System SpecsSystem Spec

Network Event ID 4321 problems?

Similar Threads
Thread Thread Starter Forum Replies Last Post
the dns server sendto() function failed. the event data contains the error - event id 7053 Hugo Server General 9 17 Dec 2009
CAPI2 Event 11 and Event 30 and Event 82 Errors Ken Vista General 0 09 Oct 2009
HELP need to solve this problem asap - Unable to start event viewer/event log service aabb Software 3 26 Apr 2009
Vista Ultimate x64 netbt error 4321 ohiovista64 Vista General 1 18 Apr 2009
Boot up Issues - Critical Event Log errors - Event ID = 100, 200, 400, 307, 402 mehowe General Discussion 1 15 Feb 2009