Hello, as the DC is also used for VPN(which is not optimal) i assume you have more then one ip address on it or mix DNS servers on it, please post an unedited ipconfig /all from the DC/DNS server and a client with problems.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Hello - I'm having the same issue on Windows 2008 R2, did you ever get this resolved?

Here is the exact Event ID 2012 Log Name: System Source: srv Date: 16/09/2011 17:28:16 PM Event ID: 2012 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: Ensyst-FS.ensyst.local Description: While transmitting or receiving data, the server encountered a network error. Occassional errors are expected, but large amounts of these indicate a possible error in your network configuration. The error status code is contained within the returned data (formatted as Words) and may point you towards the problem. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="srv" /> <EventID Qualifiers="32768">2012</EventID> <Level>3</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-09-16T09:28:16.627Z" /> <EventRecordID>426722</EventRecordID> <Channel>System</Channel> <Computer>Ensyst-FS.ensyst.local</Computer> <Security /> </System> <EventData> <Data>\Device\LanmanServer</Data> <Binary>0000040001002C0000000000DC07008000000000840100C00000000000000000000000000000000087050000</Binary> </EventData> </Event> Binary data: In Words 0000: 00040000 002C0001 00000000 800007DC 0008: 00000000 C0000184 00000000 00000000 0010: 00000000 00000000 00000587 In Bytes 0000: 00 00 04 00 01 00 2C 00 ......,. 0008: 00 00 00 00 DC 07 00 80 ....?.? 0010: 00 00 00 00 84 01 00 C0 ....?..? 0018: 00 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ 0028: 87 05 00 00 ?... No teaming on NIC

Hi, Printscreen of Server ipconfig/all

I have a single server. No virtual. Role of server : AD, DNS, DHCP , VPN and File Sharing. Users encounter delayed write failure on Win XP SP3 and realise that mapped drive gets disconnected. Third party applications could not write to database because the mapped drive being disconnected. Double click on mapped drive the connection resume. This happens when the app tries to write to database. Observation : On server event ID 2012 every 5 -10 min interval. I have update the Broadcom NIC drivers, firmware and even change the server mainboard on my server but problem still persist. Anyone encounter the above case? Alan

do you have teaming enabled by any chance ? http://www.virmansec.com/blogs/skhairuddin

I have changed the switch at 13:26. Only 2 events recorded after 2 hrs. Morning events occurrences is average every 15 mins. Anyone knows how to interpret the binary codes? What does Locale ID 1033 refer to?