IMPORTANT: This article contains information about modifying the registry. Before you
modify the registry, make sure to back it up and make sure that you understand how to restore
the registry if a problem occurs. For information about how to back up, restore, and edit the
registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows Registry
SYMPTOMS
The following error message may appear in the Event Viewer tool:
Event ID: 4320
Source: NetBT
Description: Another machine has sent a name release message to this
machine probably because a duplicate name has been
detected on the TCP network. The IP address of the node
that sent the message is in the data. Use nbtstat -n in a
command window to see which name is in the Conflict state.
This article may also apply to Event ID: 4319.
RESOLUTION
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may
require you to reinstall your operating system. Microsoft cannot guarantee that you can solve
problems that result from using Registry Editor incorrectly. Use Registry Editor at your own
risk.
Computer on the Network with the Same Name
Use the
nbtstat -n command to see the name of the computer in the conflict state. The IP address of the node that sent the message is in the data that this command returns. The following example shows what the data may look like in one of these events:
0000: 00 00 04 00 01 00 54 00
0008: 00 00 00 00 e0 10 00 c0
0010: 00 00 00 00 00 00 00 00
0018: 00 00 00 00 00 00 00 00
0020: 00 00 00 00 00 00 00 00
0028: e7 1a 65 16
Offset 28 is the IP address of the computer requesting name release. To
determine the decimal IP address, invert the four hexadecimal numbers and
convert them to decimal numbers separated by periods. Using this method,
the IP address of E7 1A 65 16 becomes 22.101.26.231.
The status column of the
nbtstat output for the computer in conflict should contain either "Conflict" or "Released."
You can run the
nbtstat -a command with the IP address to get the computer name.
Identical User Name Logged on to Multiple Computers
The user names will register with a <03h>, and that will be the
name in conflict. Ask the user to log off of all computers and log
back on to just one computer.
Inactive or Duplicate Names in the WINS Database
Ask your system administrator to check the database to verify that there are no duplicate entries by deleting the static mapping in the WINS server. To do so, use the following steps:
- On the WINS server computer, start the WINS Manager.
- Click Mappings, click Static Mappings, and then click the entry that corresponds to your computer.
- Click Delete Mapping, and then click close.
- Restart your Windows XP-based computer (not the WINS server).
Corruption in the DHCP Database
For a possibly corrupted DHCP database, clear DHCP related entries in
the registry, delete any .mib files, and then reinstall DHCP. It may be possible, if you reinstalled without cleaning out old settings in the registry, that the entries that cause the behavior are still there.
Conflicting Network Adapters in a Multihomed Computer
Other computers on the network may indicate that the multihomed computer's
second card is in conflict with its first. Those computers then send the name release message.
"IPCONFIG /ALL" Returns Incorrect Host Name
Edit the registry, and change the computer name in the TCP/IP parameters
section:
- Start Registry Editor (Regedit.exe), and locate the HOSTNAME value in the following subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip
\Parameters
- Double-click the HOSTNAME value, and then edit the string data.