NetBT Event ID 4311

[morog]

Gerry
"problems that may occur when administrative shares are missing"- this can
not be applied to my case.
Following tutorials from http://support.microsoft.com/kb/842715, all results
were O.K. after worked out what is suggested in a/m Article, meaning
administrative shares not missing.

 

[Gerry]

Morog

Finished work for the day so I have now done some more research.

You have not posted a complete copy of the Error Report and I have seen
several variations of the basic report. Can you post a complete report.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event Viewer.Now
start your message (email) and do a paste into the body of the message.
Make sure this is the first paste after exiting from Event Viewer.

Certain versions of the Error Report say "No User Action required". This
is because the system keeps trying until it suceeds. Does it eventually
suceed in your case?

I then tried to find out what contribution NetBIOS makes to the way a
computer works. What I discovered was that there are suspicions that the
service may be a left over from a past redundant arrangement. The
default Start Up type for the TCP/IP NetBIOS Helper Service is automatic
but there is a recommendation to set it to Manual.
http://www.theeldergeek.com/tcp_ip_netbios_helper.htm

My own computer is running without error with the service set to
Automatic. You could see if setting it to Manual has any adverse affect
and whether the errors cease.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[morog]

This is Error message:


Details
Product: Windows Operating System
ID: 4311
Source: NetBT
Version: 5.2
Symbolic Name: EVENT_NBT_CREATE_DEVICE
Message: Initialization failed because the driver device could not be
created.

Explanation
This is a transient condition that can be safely ignored.

NetBIOS over TCP/IP (NetBT) temporarily could not start but it continues
trying to start until it succeeds.


User Action
No user action is required.



--------------------------------------------------------------------------------

Related Knowledge Base articles
You can find additional information on this topic in the following
Microsoft Knowledge Base articles:
• Event ID 4311 appears in the system log when you reinstall a network
adapter in Windows XP
Describes a problem where Windows incorrectly generates Event ID 4311 when
you remove and then reinstall a Plug and Play network adapter.

My Start Up type for the TCP/IP NetBIOS Helper Service is set to automatic
..I'll try to change it to "Manual".

 

[Gerry]

Morog

That is the version of the Error, which says it can be safely ignored.

Select Start, Control Panel, Administrative Tools, Services, right cick
on TCP/IP NetBIOS Helper and select Properties, General tab. Use the
scroll bar to change from Automatic to Manual, click on Apply and OK.
Exit and restart your computer and the change will have been made.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[morog]

Change from "Automatic" to "Manual" did not help- after reboot Error ID 4311
appear again at usual place.

 

[nass]

Morog,
Can you check the dependencies on the TCP/IP NetBios Helper?, also what
under the Log On tab, is it running local or on a profile NT Auth?.

Dependencies :
AFD Networking Support Enviro
NetBIOS over TCP

 

[morog]

nass,
Dependencies :
+AFD Networking Support Enviro
+ NetBIOS over TCP
+TCP/IP Protocol Driver
Under Log On is running on : this account ..... NT AUTHORITY\Local Service

 

[nass]

Can you expand the [+]TCP/IP Protocol Driver and see the sub-tree what will
show.
I have only two dependencies on this service.
AFD and NetBIOS over TCP

 

[morog]

Yes, I can expand the [+]TCP/IP Protocol Driver and sub-tree show +IPSEC driver
--
morog

Can you expand the [+]TCP/IP Protocol Driver and see the sub-tree what will
show.
I have only two dependencies on this service.
AFD and NetBIOS over TCP

nass,
Dependencies :
+AFD Networking Support Enviro
+ NetBIOS over TCP
+TCP/IP Protocol Driver
Under Log On is running on : this account ..... NT AUTHORITY\Local Service

 

[nass]

Hi Morog,
Read the info here then can you please send me your hijackthis log.
How to determine and to recover from Winsock2 corruption in Windows Server
2003, in Windows XP, and in Windows Vista
http://support.microsoft.com/kb/811259


TCP/IP and NBT configuration parameters for Windows XP
http://support.microsoft.com/kb/314053

Search for this file and see the properties for it, what the size the date
of the creation and the date modified..etc.
tcpip.sys

(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
Can you please send me a copy at (e-mail address removed) , remove
the obvious to email me.

Yes, I can expand the [+]TCP/IP Protocol Driver and sub-tree show +IPSEC driver
--
morog

Can you expand the [+]TCP/IP Protocol Driver and see the sub-tree what will
show.
I have only two dependencies on this service.
AFD and NetBIOS over TCP

nass,
Dependencies :
+AFD Networking Support Enviro
+ NetBIOS over TCP
+TCP/IP Protocol Driver
Under Log On is running on : this account ..... NT AUTHORITY\Local Service
--
morog


:


Morog,
Can you check the dependencies on the TCP/IP NetBios Helper?, also what
under the Log On tab, is it running local or on a profile NT Auth?.

Dependencies :
AFD Networking Support Enviro
NetBIOS over TCP


:

Change from "Automatic" to "Manual" did not help- after reboot Error ID 4311
appear again at usual place.
--
morog


:

Morog

That is the version of the Error, which says it can be safely ignored.

Select Start, Control Panel, Administrative Tools, Services, right cick
on TCP/IP NetBIOS Helper and select Properties, General tab. Use the
scroll bar to change from Automatic to Manual, click on Apply and OK.
Exit and restart your computer and the change will have been made.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[morog]

nass,
After running the tool 811259, nothing better happend, reboot and Error
NetBT 4311 appear again.
Shall I rollback using the same tool , or keep new Registry setting ( if any
).
Make hijackthis log file, but please send me your e-mail addres, because I
didn't understand this what you wright.
Sorry
--
morog

Hi Morog,
Read the info here then can you please send me your hijackthis log.
How to determine and to recover from Winsock2 corruption in Windows Server
2003, in Windows XP, and in Windows Vista
http://support.microsoft.com/kb/811259


TCP/IP and NBT configuration parameters for Windows XP
http://support.microsoft.com/kb/314053

Search for this file and see the properties for it, what the size the date
of the creation and the date modified..etc.
tcpip.sys

(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
Can you please send me a copy at (e-mail address removed) , remove
the obvious to email me.

Yes, I can expand the [+]TCP/IP Protocol Driver and sub-tree show +IPSEC driver
--
morog

Can you expand the [+]TCP/IP Protocol Driver and see the sub-tree what will
show.
I have only two dependencies on this service.
AFD and NetBIOS over TCP


:

nass,
Dependencies :
+AFD Networking Support Enviro
+ NetBIOS over TCP
+TCP/IP Protocol Driver
Under Log On is running on : this account ..... NT AUTHORITY\Local Service
--
morog


:


Morog,
Can you check the dependencies on the TCP/IP NetBios Helper?, also what
under the Log On tab, is it running local or on a profile NT Auth?.

Dependencies :
AFD Networking Support Enviro
NetBIOS over TCP


:

Change from "Automatic" to "Manual" did not help- after reboot Error ID 4311
appear again at usual place.
--
morog


:

Morog

That is the version of the Error, which says it can be safely ignored.

Select Start, Control Panel, Administrative Tools, Services, right cick
on TCP/IP NetBIOS Helper and select Properties, General tab. Use the
scroll bar to change from Automatic to Manual, click on Apply and OK.
Exit and restart your computer and the change will have been made.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~