| Event Id | 4319 |
| Source | NetBT |
| Description | A duplicate name has been detected on the TCP network. The IP address of the machine that sent the message is in the data. Use nbtstat -n in a command window to check which name is in the conflict state. |
| Event Information | CAUSE:There are several possible reasons why this error message may be generated: 1) There is a computer on the network with the same name. 2) Identical user name logged on to multiple computers. 3) Inactive or duplicate names in the WINS database. 4) Corruption in the DHCP database. 5) Conflicting network adapters in a multihomed computer. 6) “ipconfig/all” returns incorrect host name. RESOLUTION: 1) If the IP address is all zeros, have the customer look to see if there are any Windows for Workgroups computers on the network with the same name. Windows for Workgroups computers will sometimes return all zeros for their IP address with this error. 2) The user names will register with a <03h> and that will be the name in conflict. Have the user log off of all computers and log back on to just one. 3) Check the database to verify there are no duplicate entries: <a href="http://support.microsoft.com/default.aspx?scid=kb;EN-US;164016">Click here</a> |
| Reference Links | Possible Causes of the NetBT Event ID 4320 MS00-047: NetBIOS Vulnerability May Cause Duplicate Name on the Network Conflicts How to Diagnose Event ID 4320 or 4319 Name resolution and connectivity issues on a Routing and Remote Access Server that also runs DNS or WINS SBS: NetBT Event 4319 Connecting to ISP Event ID 4319: Duplicate Names on the Network WINS Service Stops or Does Not Start and Event ID 4319 or 4165 Is Logged NetBT Event ID 4320 Appears in Event Viewer |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.