Windows 2008 R2 Server Event Id 4319 Please help

Thomas Grassi
Thomas Grassi used Ask the Experts™
on
Starting late yesterday I started getting event id 4319 on my Windows 2008 R2 Server

I ran NBTSTAT -N

Log Name:      System
Source:        NetBT
Date:          6/10/2015 11:05:48 AM
Event ID:      4319
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SERV025.FQDN.com
Description:
A duplicate name has been detected on the TCP network.  The IP address of the computer that sent the message is in the data. Use nbtstat -n in a command window to see which name is in the Conflict state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="NetBT" />
    <EventID Qualifiers="49152">4319</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-06-10T15:05:48.431844500Z" />
    <EventRecordID>19320</EventRecordID>
    <Channel>System</Channel>
    <Computer>SERV025.FDDM.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Binary>000000000100320000000000DF1000C0050100004908020A03000000000000000000000000000000</Binary>
  </EventData>
</Event>


Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.



C:\>nbtstat -n

Local Area Connection:
Node IpAddress: [10.2.8.36] Scope Id: []

                NetBIOS Local Name Table

       Name               Type         Status
    ---------------------------------------------
    MYDOM            <00>  GROUP       Registered
    SERV025        <00>  UNIQUE      Registered
    SERV025        <20>  UNIQUE      Registered

Local Area Connection 2:
Node IpAddress: [10.2.8.37] Scope Id: []

                NetBIOS Local Name Table

       Name               Type         Status
    ---------------------------------------------
    MYDOM            <00>  GROUP       Registered
    SERV025        <00>  UNIQUE      Registered
    SERV025        <20>  UNIQUE      Registered

C:>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : SERV025
   Primary Dns Suffix  . . . . . . . : FQDN
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : our.network.tgcsnet.com

Ethernet adapter Local Area Connection 2:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom BCM5716C NetXtreme II GigE (NDIS
 VBD Client) #39
   Physical Address. . . . . . . . . : 00-26-B9-85-18-F6
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 10.2.8.37(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.252.0
   Default Gateway . . . . . . . . . : 10.2.8.1
   DNS Servers . . . . . . . . . . . : 10.2.8.24
                                       10.2.8.30
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom BCM5716C NetXtreme II GigE (NDIS
 VBD Client) #30
   Physical Address. . . . . . . . . : 00-26-B9-85-18-F5
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 10.2.8.36(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.252.0
   Default Gateway . . . . . . . . . : 10.2.8.1
   DNS Servers . . . . . . . . . . . : 10.2.8.24
                                       10.2.8.30
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{3CD765E1-55F8-42C7-A60C-045BD073DE55}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{D39D02A5-C4AB-4123-AE47-85ECA3A56A14}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes



This is popping up every so many minutes

Restarted the server earlier today

This server also runs my Exchange Server 2010

No other machine on the network has this name


Thoughts?

Thanks in advance

Tom
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2016

Commented:
with multiple network adapters you should only have 1 gateway.
Systems Administrator
Commented:
Dave I know that I have had this setup for over a year no problem like today.


This server needs two interfaces for my exchange server.  

It receives email on two ports

25 and 1025

My router forwards to both using unique ip address.

Any other thoughts?
Thomas GrassiSystems Administrator

Author

Commented:
figured this out myself

Ran nbtstat -R    cleared cache

then on each network adapter
Disable NETBIOS over TCP/IP in the Wins Tab

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial