Event ID - 4001

Event Id4001
SourceMicrosoft-Windows-PerfCtrs
DescriptionNBT Open failed. See NBT error message.
Event Information According to Microsoft :

Diagnose

This error might be caused by one of the following conditions:
  • The list of counters is corrupt.
  • The Remote Registry service is not running on a remote system.
  • The File and Printer Sharing firewall exception is not enabled on a remote system running Windows Vista.
  • The application is running as a user with insufficient privileges.
The list of counters is corrupt

If the performance counter could not unload the strings for the specified service, the registry might be corrupted. To correct this problem, follow the steps in the section titled "Rebuild the list of available counters."

The Remote Registry service is not running on a remote system

In order to collect performance counters remotely, the Remote Registry service must be running on the destination system.

Membership in the destination system's local Administrators group is required to change service settings.

To check if the Remote Registry service is running:
  1. On the destination system, click Start.
  2. In the Start Search text box, type compmgmt.msc , and then press ENTER. Microsoft Management Console (MMC) will start.
  3. In the navigation tree, expand Services and Applications and click Services.
  4. In the Services list, scroll down and click Remote Registry .
  5. Check to see if the status of the Remote Registry service is Started . If it is not, follow the steps in the section titled "Enable the Remote Registry service" to resolve the error.
The File and Printer Sharing firewall exception is not enabled on a remote system running Windows Vista

On systems running Windows Vista, the File and Printer Sharing firewall exception must be enabled on the destination system.

Membership in the destination computer's local Administrators group is required to change firewall settings.

To check File and Printer Sharing firewall exception settings:
  1. On the destination system, click Start and then click Control Panel .
  2. In the Control Panel search box, type firewall .
  3. In the search results, double-click Windows Firewall .
  4. In Windows Firewall, click Change settings .
  5. On the Exceptions tab, check to see if File and Printer Sharing is selected. If it is not, follow the steps in the section titled "Enable the File and Printer Sharing firewall exception on a remote system running Windows Vista" to resolve the error.
The application is running as a user with insufficient privileges

To view performance counters, a user must be a member of the local Performance Monitor Users group, Performance Log Users group, Administrators group, or equivalent. Applications that run as a user or system account with insufficient privileges may not be able to load performance counters correctly. Follow the steps in the section titled "Run the application as a user with sufficient privileges" to identify a resolution.

Cause :

The Remote Registry service is not enabled then enable remote registry.Follow the steps using this url to resolve the issue."Enable the Remote Registry service ".

Cause :
The File and Printer Sharing firewall exception is not installed on a remote Windows Vista system.

Cause :

The File and Printer Sharing firewall exception is not installed on a remote Windows Vista system.
Change the firewall setting ,in the Exceptions tab, click the File and Printer Sharing check box.

To resolve this issue using the following url."

Cause :
The application is running as a user with insufficient privileges then Run the user with sufficient privilleges.Follow the steps using the url to resolve the issue."Run the application as a user with sufficient privileges "

Cause :

The list of counters is corrupt then rebuild the list of counters.Follow these steps to resolve using the url ."Rebuild the list of available counters ".

Verify :

You can use Windows Reliability and Performance Monitor to verify that netowkr performance counters are properly collected and displayed in a Performance Monitor graph. In addition, you can use the typeperf command to get a list of the available counters on the local system.

Membership in the local Administrators group is required to complete these procedures

View counters in Performance Monitor

To view counters in Performance Monitor:
  1. On the computer where you want to view counters, click Start . In the Start Search text box, type perfmon.exe , and then press ENTER.
  2. In the navigation pane, expand Monitoring Tools , and then click Performance Monitor.
  3. Click the Add button to open a list of available performance counters.
  4. In the Add Counters dialog box, you can click Help for more information on adding counters. When you have finished adding counters to the list, click OK.
  5. Verify that the performance counters you selected are displayed in the Performance Monitor graph.
View a list of counters using the typeperf command To view a list of counters at the command prompt:
  1. Click Start , click All Programs , and click Accessories. Right-click Command Prompt , and click Run as administrator .
  2. At the command prompt, type typeperf -qx and press ENTER.
  3. Verify that the performance counter list contains expected values.
Reference LinksEvent ID 4001 from Source Microsoft-Windows-PerfCtrs

Enable the Remote Registry service

Enable the File and Printer Sharing firewall exception on a remote system running Windows Vista

Run the application as a user with sufficient privileges

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh