Event error 4321 source NetBT

[docfxit]

I'm getting an Event in XP Pro sp1.
Source = NetBT
Event error = 4321
The name "WORKGROUP :1d" could not be registered on the Interface with IP address 192.168.x.xxx. The machine with the IP address 192.168.x.xxx did not allow the name to be claimed by this machine.

Both IP addresses are the same.
This PC is using the IP address for a VPN connection. It's issued by a VPN DHCP server. It won't let me use a static IP address. Once apon a time there was PC on the LAN with the same IP address but it isn't connected any more.

The Workgroup for all PC's is Workgroup. The computer name is GaryLT.

What can I do to stop this error?

I do have other PC's on the LAN.
1 XP Pro sp2
3 XP Pro sp2
1 98 se

This error is generated every 5 min.

Thanks,
docfxit

 

[ITPangaeaArchitect]

the error indicates that the NetBIOS transport (NetBT is NetBIOS Transport) cannot register its IP...most likely, you have a WINS server who still has teh record within its database for the machine that used to have the same IP. Find and delete this record (you can filter your view to make searching easier)...then on the problem client, do a nbtstat -R & nbtstat -RR (must use capital 'R''s) or reboot (I would recommend doing the reboot)..then check event viewer for the error again...does it reappear? Youll need to check the database on each WINS server the connection is configured to use...unless of course they replicate their databases with each other...then searching 1 SHOULD work (I say SHOULD because if WINS replication is broken then you may need to check them all)...if I recall correctly, unless configured to behave differently, WINS will keep records that were registered on it indefinitely (there may be an actual time frame but don;t know it off the top of my head...the word/description of indefinitely here is meant to mean "by the time your going to use the same information")...in other words...

ex:
WINS server - 10.0.0.1, 10.0.0.2
DNS server - 10.0.0.1, 10.0.0.2

-client1 points to 10.0.0.1, 10.0.0.2, or both for WINS
-workstation IP address is present in DNS & WINS, and belongs to the domain
-client1 is removed from the domain (for any reason)
-DNS server will maintain the record for the client who last registered the IP (client1), as well as their hostname...this should be deleted manually unless scavenging is enabled...in which case that will address this part
-WINS server will maintain the record for the type of record-to-IP mapping..this is where your error comes in...you are not the creating machine of the WINS record...so you are unable to update it (basic explanation)
the place to check the setting in 2003 for WINS record deletion is to go to the server props in WINS console, go to the intervals tab, check the values on here...in particular, extnction interval and extinction timeout...I believe those are the guys responsible for deleting the records....

that is all overkill though, as you can simply search for the old computer...just right click active registrations and select display records....check the box for filter records matching this IP address...then do a find now....if it finds a record for the other workstation, delete it...then go ahead with reboot of problem client...


-Brandon Wilson
MCSE00/03, MCSA:Messaging, MCSA03, A+
almost got a paragraph there