Link to home
Start Free TrialLog in
Avatar of mouhamad-adpc
mouhamad-adpcFlag for United Arab Emirates

asked on

MRxSmb Event ID 50

I have 2 sites, SITE1 and SITE2 connected through an IPVPN 10mbtis link.

All the users on SITE1 cannot save word documents on the File/Print server located in SITE1 (check attachment 1)
All the users on SITE1 cannot save word documents on any shared sessions on the other XP clients in SITE1 (check attachment 1)

In addition to this error, on the Event viewer all the users are getting an MRxSmb Event ID 50 (check attachment 2)

I took the below steps but unfortunately the problem still there:

1) I followed the steps on the File/Print server, the Symantec article referred by the Microsoft knowledge base:
http://seer.entsupport.symantec.com/docs/260805.htm 

2) I uninstall Office 2003, install again.

3) Change from dynamic IP to static IP.

4) I changed the NetBIOS settings to be over TCP/IP.

5) I tried on word 2007 it works fine but word 2003 not.

6) I check the enablesecuritysignature value under the following key in the registry and it was set to 0.
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Lanmanserver\Parameters

7) I check the write cache option on the File/Print server disks and it was disabled.

8) Have the latest updates for MS Office and MS Windows.

9) Change the Network speed on the NIC adapter from Auto to 100 Full and Half.

10) Restart all the network equipments at including the File/Print server.

11) There is no problem using it through CITRIX.

12) I tried saving from SITE1 to SITE2 XP machine, it worked fine.

This problem is happening on all the machines in SITE2.

Please help!
Avatar of ZawngEK
ZawngEK
Flag of India image

Avatar of mouhamad-adpc

ASKER

Dear Zawng,
 
I already went thgough all these articles but no luck.
i'm sorry for some reason there are no attachments.
please find the below links for attachment 1 and 2:
http://www.adpc.ae/pages/1.jpg
http://www.adpc.ae/pages/2.jpg  
Where are the experts?
got your attachments. will study it more.

meanwhile, if you have not, go through: http://www.eventid.net/display.asp?eventid=50&eventno=647&source=MRxSmb&phase=1

also you said,
- I have 2 sites, SITE1 and SITE2 connected through an IPVPN 10mbtis link.
- 9) Change the Network speed on the NIC adapter from Auto to 100 Full and Half.

1. did you really try 10mbps full duplex at both the sites?
2. have you verified all pins/connectors are clean and ok?
3. if you can, try another switch, preferably another brand from the one you are already using.
can you post all the Event Data both in Bytes and Words? The screenshot shows only the last 3 lines (0018:, 0020:, 0028:)
similar problem: http://www.broadbandreports.com/forum/r21550794-Event-ID-50-MRxsmb-Delayed-write-failed-W2k3-Server-std

their solution is: "As it turns out it was a Driver Incompability with Win 2003 Server, found an updated driver for network card and problem solved. Left here for future reference."

so make sure you have the latest lan/ethernet card driver.
similar problem, but with readyNAS. they solved their problem. worth studying:

http://www.readynas.com/forum/viewtopic.php?f=21&t=21006&start=0
hint from able: something might have kept your network busy
sorry, typos. should be - hint from above: something might have kept your network busy
ASKER CERTIFIED SOLUTION
Avatar of ZawngEK
ZawngEK
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks ZawngEK for all your help.
First of all, it's not only one computer that's facing this problem, any PC/Laptop gets connected to this network will face the same issue.
I have the below network equipments:
 CS - 4503
Cisco Core Switch
CS - 2811
Cisco Internet DSL Router
CS  3825
Cisco Voice Gateway & IPVPN Router
CS  PIX 515
Cisco Firewall
CS- 3560
Cisco Edge Switch
I checked all the above suggestions but no luck.
I attached the error (words/bytes)

{Delayed Write Failed} Windows was unable to save all the data for the file \Device\LanmanRedirector. The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.
 
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
 
Bytes:
 
0000: 04 00 04 00 02 00 56 00   ......V.
0008: 00 00 00 00 32 00 04 80   ....2..€
0010: 00 00 00 00 0c 02 00 c0   .......À
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 0c 02 00 c0               ...À    
 
 
Words:
 
0000: 00040004 00560002 00000000 80040032
0010: 00000000 c000020c 00000000 00000000
0020: 00000000 00000000 c000020c 

Open in new window

regarding the TCP IP error i found only one event 4226

Event Type:	Warning
Event Source:	Tcpip
Event Category:	None
Event ID:	4226
Date:		12/31/2008
Time:		9:25:45 AM
User:		N/A
Computer:	KPIDTEMP2
Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
 
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00   ......T.
0008: 00 00 00 00 82 10 00 80   ....‚..€
0010: 01 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

Open in new window

IT SEEMS THAT NONE OF THE EXPERTS IS ABLE TO SOLVE THIS PROBLEM OR EVEN TROUBLESHOOT IT !
Thanks for the help.
Avatar of challBOE
challBOE

Absolutely no solution, but I am suddenly experiencing the same problem with my servers using HP EVA (large storage device).  At first I thought I had redundant lazy write buffering (on OS and on EVA- I think). But, now am seeing users getting infected with Confiker. Symantec calls it something like Downadup.
I suspect this is the cause in my place.
HI

I had the same aerror on a XP workgroup (5) , working with an accounting sooftware , after weeks of diagnosis we finally solve the problem by installing a NAS and put the acconting data there...don`t know why but the Delayed Write Failed ...is solved...