Microsoft KB Archive/177078

= Antivirus software may cause Event ID 2011 =

Article ID: 177078

Article Last Modified on 12/1/2007

-

APPLIES TO


 * Microsoft Windows XP Professional
 * Microsoft Windows XP Home Edition
 * Microsoft Windows XP Professional x64 Edition
 * Microsoft Windows XP Media Center Edition 2002
 * Microsoft Windows XP Tablet PC Edition
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Professional Edition
 * Microsoft Windows 2000 Datacenter Server
 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows NT Server 4.0 Standard Edition
 * Microsoft Windows NT Server 4.0 Enterprise Edition
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)

-



This article was previously published under Q177078



Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry



SYMPTOMS
After you install Norton AntiVirus for Windows or IBM AntiVirus 3.01N (Build 301.590), you receive the following error messages:

Not enough server storage is available to process this command.

-and-

Not enough memory to complete transaction. Close some applications and retry.

Clients cannot access network shares. Additionally, Event Viewer on the Windows server may log one or more of the following event messages in the system log:   Event ID   : 2011 Source    : Srv Description: The Server's configuration parameter "IRPStackSize" is too small for the server to use a local device. Please increase the value of this parameter.



RESOLUTION
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk. To resolve this behavior, increase the IRPStackSize value in the registry:  Click Start, and then click Run. Type regedit, and then click OK. Navigate to the following key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters

 In the right pane, double-click the IRPStackSize value.

NOTE: If the IRPStackSize value does not already exist, use the following procedure to create it:  In the Parameters folder of the registry, right-click the right pane. Point to New, and then click DWord Value.</li> Type IRPStackSize.

IMPORTANT: Type "IRPStackSize" exactly as it is displayed because the value name is case-sensitive.</li></ol> </li> Change the Base to decimal.</li> In the Value Data box, type a value that is larger than the value that is listed.

If you created the IRPStackSize value using the procedure described in step 4, the default value is 15. It is recommended that you increase the value by 3. Therefore, if the previous value was 11, type 14, and then click OK.</li> Close the Registry Editor.</li> Restart the computer.</li></ol>

If the problem persists after you complete the preceding procedure, try to increase the value of IRPStackSize even more. The maximum value for Windows 2000 is 50 (0x32 hex).

If you are running Windows NT 4.0, and the problem persists after you complete the preceding procedure, you may have to apply Windows NT Service Pack 4 or Service Pack 5.

<div class="moreinformation_section">

MORE INFORMATION
In Windows NT 4.0, the default value of IRPStackSize is 0x4, and the range is from 0x4 to 0xC (4-12). Windows NT 4.0 with Service Pack 5 or later ignores values less than 0x7.

In Windows 2000, the default value of IRPStackSize is 15, and the range is from 11 to 50. In Windows XP, the default value for IRPStackSize is 15, and the range is from 11 to 50.

NOTE: The default and range of Microsoft Windows Server 2003 is the same as that for Windows XP. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

106167 Error message: Not enough server storage is available

NOTE: The preceding article recommends that you increase the IrpStackSize value; however, if you increase this value to its maximum (for example, if you increase this value to the maximum value of 12 on a computer that is running Windows NT 4.0, or to the maximum of 50 on a computer running Windows 2000), this behavior may still occur.

For more information, click the following article number about IRPStackSize to view the article about IRPStackSize in the Microsoft Knowledge Base:

198386 Changes in IRP stack size in Lanman Server

For more information, visit the following Symantec Web sites:

http://service1.symantec.com/SUPPORT/ent-security.nsf/552ba2f7636bedf088256818006f78bf/b169373034dbfd1588256a2200272574?OpenDocument&src=bar_sch_nam

http://service1.symantec.com/SUPPORT/ent-security.nsf/9d94c8571a91ba4788256bf3007f62b5/1b2df18cc3f5dedd88256ddd0082f2ea?OpenDocument&src=bar_sch_nam

NOTE: The locations of these documents are subject to change without notice. Symantec provides these links as a convenience only. The inclusion of such links does not imply that Symantec endorses, recommends, or accepts any responsibility for the content of such sites.

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

Keywords: kb3rdparty kberrmsg kbnetwork kbprb KB177078

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.