Event ID 4311

A few weeks ago, we had a user complain that they were not able to access anything on the network. If I recall correctly, she was able to log in to the domain, but that was pretty much it. She wasn’t able to access any of the resources on the network.

After we started researching the problem, we found a few entries that pointed to a virus being the cause of the issue. We couldn’t find any traces of a virus after running multiple scans.

Next on the list was to rebuild the TCP/IP stack. If you don’t know how to rebuild a TCP/IP stack, you can follow the instructions on Knowledge Base article 299357. Essentially, you have to run one command from the command prompt:

netsh int ip reset filename.txt

After a quick reboot, the issue was still there.

After we researched some more, I came across a post that stated we needed to check a value for a key inside the registry. The key was located at:

HKLM\SYSTEM\CurrentControlSet\Services\NetBT\Parameters\TransportBindName

Event ID 4311 fix

The value is supposed to be “\Device\” (see image above) without the quotations. We added that value, restarted the machine, and everything was back to normal.

0 Responses to “Event ID 4311”


  • No Comments

Leave a Reply