Spammed by MRxSmb event

Hi guys,

I've got a server which drives me crazy. The system event log is spammed by this event:

Event Type:      Warning
Event Source:      MRxSmb
Event Category:      None
Event ID:      3034
Date:            10/27/2003
Time:            2:17:44 PM
User:            N/A
Computer:      MYSERVER
Description:
The redirector was unable to initialize security context or query context attributes.
Data:
0000: 00080000 00560002 00000000 80000bda
0010: 00000000 80090322 00000000 00000000
0020: 00000000 00000000 0000046c 80090322


The event is coming all day long, sometimes within seconds. I've looked in Microsoft KB and found some articles which have no solutions to my problem.

Regards,
Morten
LVL 1
mdrastedAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

adonis1976Commented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Netman66Commented:
Did you see this one?

http://support.microsoft.com/default.aspx?scid=kb;[LN];263208

0
mdrastedAuthor Commented:
Hi again,

I've looked at www.eventid.net where someone suggested a trace with Network Monitor. And here is some of the result:

UDP: Src Port: Unknown, (4104); Dst Port: Unknown (88); Length = 1283 (0x503)
UDP: Src Port: Unknown, (88); Dst Port: Unknown (4104); Length = 1248 (0x4E0)

The destination server is the domain controller.
0
mdrastedAuthor Commented:
I traced the trafic as suggested on www.eventid.net, and I found out that CA was once installed on the domain controller, and tried to communicate with the server on port 88 and 4104. So it's due to a faulty uninstallation of CA.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.