Hello,I am trying to solve an issue creating a backup froma 2003 server using NTBackup to a 2008 server with SP1. The backup always fails about half way. From the event logs on the 2008 server I get the message below. I've tried researching the error but all KB articles and references are to Server 2003. I've already tried following the 2003 articles to DisableDos and to increase the MaxMpxCt but they must not be supported or effective. (I set MaxMpxCt to 2049)Is there a way to create an exception or disable DoS?Log Name: SystemSource: srvDate: 4/15/2009 11:52:43 PMEvent ID: 2025Task Category: NoneLevel: WarningKeywords: ClassicUser: N/AComputer: IRV2Description:The server has detected an attempted Denial-Of-Service attack from client \\IRV1, and has disconnected the connection.Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="srv" /> <EventID Qualifiers="32768">2025</EventID> <Level>3</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2009-04-16T06:52:43.232Z" /> <EventRecordID>24017</EventRecordID> <Channel>System</Channel> <Computer>BPASVRAD1.bpa2000.com</Computer> <Security /> </System> <EventData> <Data>\Device\LanmanServer</Data> <Data>\\IRV1</Data> <Binary>000000000200280000000000E907008000000000220000C000000000000000000000000000000000</Binary> </EventData></Event>

This errors can appear if someone is trying to offload socket.1.I hope you have set value to 1 for DisableDos key.2. Under NIC properties of both machines, disable all offload features.3. Create DWORD regkey called DisableTaskOffload under below location and set value to 1. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters 4. disable SMB2 on Server 2008 withfollwing registry key:HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters Regkey will be DWORD and it will be called Smb2 and set value to zero (0).5. Set 3 regkey values to zero on server 2003,EnableTCPChimney EnableRSS EnableTCPA HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters Hope this helps

hi there,in-line with shilpesh suggestion please follow the below article http://support.microsoft.com/kb/898468make sure you disable tcpoffloading option from your NICsainath Windows Driver Development

Right now i have teamed two adapters. Will any of these steps break the team? Also this is running 64bit Server 2008. Do i need to restart after any of these steps?

AFAIK, NIC teaming softwaredoesnt accept the above changes, but still i would like you to test the connectivity in a test lab. sainath Windows Driver Development

I'm curious if this resolved your issue. We are getting the same error on a Windows 2008 Server Cluster that is being used as a Fileserver. Workstations are being flagged with this error code and it is severing the connections causing write errors on the workstation. Not to mention we are in the process of migrating several file server resources to this cluster and the last migration showed pages of Network errors that seem to relate to this.