⚑ Deus Ex Machina ➽ Eventlog Lookup

Deus Ex Machina » Eventlog » Event 4321 - NetBT

NetBT - 4321


Description »
The name "LOCALPCNAME:20" could not be registered on the Interface with IP address The machine with the IP address did not allow the name to be claimed by this machine.
Data formatted as » WORDS
0000: 00000000 00560004 00000000 c00010e1
0010: 00000101 c0000001 00000001 00000000
0020: 00000000 00000000 

This event is logged when there is a name conflict. It's logged by NetBT, so it is the NetBIOS naming that is at issue here.

The event description tells us what type of name it is. Often you will see the type 1d, which is the domain master browser. Here, it is 20, which is the server service.

The full list can be found in MS KB163409.

The event is good enough to provide you with the IP address of the conflicting system, so you can run nbtstat -A against it to see what it has registered, eg:

C:\WINDOWS>nbtstat -A Private: Node IpAddress: [] Scope Id: [] NetBIOS Remote Machine Name Table Name Type Status --------------------------------------------- SERVER99 <00> UNIQUE Registered NTDOMAIN <00> GROUP Registered SERVER99 <20> UNIQUE Registered NTDOMAIN <1E> GROUP Registered MAC Address = 00-23-7D-12-3A-BC