EventId: 4356

Discussion in 'Windows Small Business Server' started by NickC, Jun 22, 2005.

  1. NickC

    NickC Guest

    I have noticed this event appearing intermittantly on various workstations
    (XP with service pack 2) for no apparent reason. I am beginning to suspect
    that it might be linked to some strange network issues that are happening.
    The network issue is that sometimes a workstation will not be visible from
    the network, no remote access, not even a response from ping.

    Anyone else seen this event?


    Source: EventSystem
    Category: (52)
    EventId: 4356

    The COM+ Event System failed to create an instance of the subscriber
    partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-870
    7-00C04FD93327}. CoGetObject returned HRESULT 8000401A.
     
    NickC, Jun 22, 2005
    #1
    1. Advertisements

  2. NickC

    Crina Li Guest

    Hi Nick,

    Thank you for posting in SBS newsgroup.

    From the post, I understand that the problem is to be: You received the
    event warning on several workstations with windows XP SP2:

    Source: EventSystem
    Category: (52)
    EventId: 4356

    The COM+ Event System failed to create an instance of the subscriber
    partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-870
    7-00C04FD93327}. CoGetObject returned HRESULT 8000401A.

    If I have misunderstood your concerns, please do not hesitate to let me
    know.

    Based on my experience, this behavior can occur when there is no DC while
    logging on workstations. To resolve this behavior, you may use the Regsvr32
    tool to unregister the Mobsync.dll file:

    1. Click Start, click Programs, click Accessories, and then click Command
    Prompt.

    2. Type the following line, and then press ENTER:

    "regsvr32 "%systemroot%\system32\mobsync.dll" /u" (without the quotation
    marks)

    3. Quit Command Prompt.

    In addition, the event is related to Systems Management Server (SMS) 2003.
    Have you installed Microsoft Systems Management Server (SMS) Advanced
    Client? If so, we have published a hotfix for this issue. Please check the
    following KB article to see if it is the case:

    Event ID 4100 or Event ID 4356 is logged in the application event log of
    Advanced Clients in Systems Management Server 2003
    http://support.microsoft.com/default.aspx?scid=KB;EN-US;831648

    If yes, you can contact our Microsoft Product Support Services via
    telephone to get the hotfix. There will be NO COST for you to obtain the
    hot fix. To obtain the phone numbers for specific technology request please
    take a look at the web site listed below.

    http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS

    If you are outside the US please see http://support.microsoft.com for
    regional support phone numbers.

    If you have any more concerns, please feel free to let me know.

    Best regards,

    Crina Li (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------
    | From: "NickC" <>
    | Subject: EventId: 4356
    | Date: Wed, 22 Jun 2005 15:05:12 +0100
    | | Newsgroups: microsoft.public.windows.server.sbs
    |
    | I have noticed this event appearing intermittantly on various workstations
    | (XP with service pack 2) for no apparent reason. I am beginning to
    suspect
    | that it might be linked to some strange network issues that are happening.
    | The network issue is that sometimes a workstation will not be visible from
    | the network, no remote access, not even a response from ping.
    |
    | Anyone else seen this event?
    |
    |
    | Source: EventSystem
    | Category: (52)
    | EventId: 4356
    |
    | The COM+ Event System failed to create an instance of the subscriber
    |
    partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-870
    | 7-00C04FD93327}. CoGetObject returned HRESULT 8000401A.
    |
    |
    |
    |
     
    Crina Li, Jun 23, 2005
    #2
    1. Advertisements

  3. NickC

    NickC Guest

    Thanks I will try that. Do you think this might be the cause of our
    intermittent network connectivity problems, the network issue is that
    sometimes a workstation will not be visible from
    the network, no remote access, not even a response from ping?

    Something else that might be relevant is that these machines have all had
    DHCPMediaSense disabled (Q326152) in order to prevent eventId: 1054.

    Cheers,
    Nick
     
    NickC, Jun 23, 2005
    #3
  4. NickC

    Crina Li Guest

    Hi Nick,

    Thanks for your reply.

    From current situation, would you please follow my suggestion firstly? If
    it does not work, then we may need to troubleshoot the network connection
    problem. I will look forward to your test results.

    Thanks for your time.

    Best regards,

    Crina Li (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------
    | From: "NickC" <>
    || Subject: Re: EventId: 4356
    | Date: Thu, 23 Jun 2005 16:23:52 +0100
    | | Newsgroups: microsoft.public.windows.server.sbs
    ||
    | Thanks I will try that. Do you think this might be the cause of our
    | intermittent network connectivity problems, the network issue is that
    | sometimes a workstation will not be visible from
    | the network, no remote access, not even a response from ping?
    |
    | Something else that might be relevant is that these machines have all had
    | DHCPMediaSense disabled (Q326152) in order to prevent eventId: 1054.
    |
    | Cheers,
    | Nick
    |
    |
    |
     
    Crina Li, Jun 24, 2005
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.