EventId: 4356

I have noticed this event appearing intermittantly on various workstations
(XP with service pack 2) for no apparent reason. I am beginning to suspect
that it might be linked to some strange network issues that are happening.
The network issue is that sometimes a workstation will not be visible from
the network, no remote access, not even a response from ping.

Anyone else seen this event?

Source: EventSystem
Category: (52)
EventId: 4356

The COM+ Event System failed to create an instance of the subscriber
partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-870
7-00C04FD93327}. CoGetObject returned HRESULT 8000401A.

Thank you for posting in SBS newsgroup.

From the post, I understand that the problem is to be: You received the
event warning on several workstations with windows XP SP2:

Source: EventSystem
Category: (52)
EventId: 4356

The COM+ Event System failed to create an instance of the subscriber
partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{6295DF2D-35EE-11D1-870
7-00C04FD93327}. CoGetObject returned HRESULT 8000401A.

If I have misunderstood your concerns, please do not hesitate to let me
know.

Based on my experience, this behavior can occur when there is no DC while
logging on workstations. To resolve this behavior, you may use the Regsvr32
tool to unregister the Mobsync.dll file:

1. Click Start, click Programs, click Accessories, and then click Command
Prompt.

2. Type the following line, and then press ENTER:

"regsvr32 "%systemroot%\system32\mobsync.dll" /u" (without the quotation
marks)

3. Quit Command Prompt.

In addition, the event is related to Systems Management Server (SMS) 2003.
Have you installed Microsoft Systems Management Server (SMS) Advanced
Client? If so, we have published a hotfix for this issue. Please check the
following KB article to see if it is the case:

Event ID 4100 or Event ID 4356 is logged in the application event log of
Advanced Clients in Systems Management Server 2003
http://support.microsoft.com/default...B;EN-US;831648

If yes, you can contact our Microsoft Product Support Services via
telephone to get the hotfix. There will be NO COST for you to obtain the
hot fix. To obtain the phone numbers for specific technology request please
take a look at the web site listed below.

http://support.microsoft.com/default...S;PHONENUMBERS

If you are outside the US please see http://support.microsoft.com for
regional support phone numbers.

If you have any more concerns, please feel free to let me know.

Thanks I will try that. Do you think this might be the cause of our
intermittent network connectivity problems, the network issue is that
sometimes a workstation will not be visible from
the network, no remote access, not even a response from ping?

Something else that might be relevant is that these machines have all had
DHCPMediaSense disabled (Q326152) in order to prevent eventId: 1054.

From current situation, would you please follow my suggestion firstly? If
it does not work, then we may need to troubleshoot the network connection
problem. I will look forward to your test results.

[onside]

Can I take it that the routine is carried out on the workstation - not on the server?

[btrotter]

I have a client with the same Event reported. He has an XP SP3 machine and reports that, at certain times of the day - typically after business hours - he is unable to save files to a drive mapped to their SBS R2 Service Pack 2 Build 3790. He has not reported experiencing the problem during regular business hours. He is the only user that reports the problem. I found this Event reported at the time he last experienced the problem. Do you think this is the cause?

Thanks for any help you can provide!