SMBClient errors

[NorbertG_TJG]

We are getting smbclient errors, while the errors don't appear to be causing any issues we are getting a fair few of them daily:

Log Name: Microsoft-Windows-SmbClient/Connectivity
Source: Microsoft-Windows-SMBClient
Date: 12/02/2015 7:36:55 AM
Event ID: 30803
Task Category: None
Level: Error
Keywords: (64)
User: SYSTEM
Computer: domainserver.domain.com
Description:
The network connection failed.

Error: {Device Timeout}
The specified I/O operation on %hs was not completed before the time-out period expired.

Server name: pcname
Server address: xxx.xxx.xxx.xxx:445
Connection type: Wsk

Guidance:
This indicates a problem with the underlying network or transport, such as with TCP/IP, and not with SMB. A firewall that blocks port 445 or 5445 can also cause this issue.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-SMBClient" Guid="{988C59C5-0A1C-45B6-A555-0C62276E327D}" />
<EventID>30803</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x400000000000040</Keywords>
<TimeCreated SystemTime="2015-02-11T21:06:55.276761800Z" />
<EventRecordID>1475</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="18400" />
<Channel>Microsoft-Windows-SmbClient/Connectivity</Channel>
<Computer>domainserver.domain.com</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Reason">4</Data>
<Data Name="Status">3221225653</Data>
<Data Name="ServerNameLength">12</Data>
<Data Name="ServerName">STORE-5461-K</Data>
<Data Name="AddressLength">16</Data>
<Data Name="Address">020001BDC0A801500000000000000000</Data>
<Data Name="ConnectionType">1</Data>
</EventData>
</Event>

Note: Server Address IP can be random PC on LAN, WAN, printer etc.

As well as the following smb errors when our HyperV server that is hosted on 'domainserver' gets backed up to disk on 'domainserver' using MS backup tool:


Log Name: Microsoft-Windows-SmbClient/Security
Source: Microsoft-Windows-SMBClient
Date: 11/02/2015 7:18:16 PM
Event ID: 31010
Task Category: None
Level: Error
Keywords: (256)
User: N/A
Computer: hypervserver.domain.com
Description:
The SMB client failed to connect to the share.

Error: {Access Denied}
A process has requested access to an object, but has not been granted those access rights.

Path: \hypervserver\f$
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-SMBClient" Guid="{988C59C5-0A1C-45B6-A555-0C62276E327D}" />
<EventID>31010</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x200000000000100</Keywords>
<TimeCreated SystemTime="2015-02-11T08:48:16.712649800Z" />
<EventRecordID>3277</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Microsoft-Windows-SmbClient/Security</Channel>
<Computer>hypervserver.domain.com</Computer>
<Security />
</System>
<EventData>
<Data Name="Reason">12</Data>
<Data Name="Status">3221225506</Data>
<Data Name="ShareNameLength">10</Data>
<Data Name="ShareName">\domainserver\f$</Data>
<Data Name="ObjectNameLength">0</Data>
<Data Name="ObjectName">
</Data>
</EventData>
</Event>

Continue reading...