subject: unable to map error code 998
posted: Thu, 24 Jul 2008 18:13:11 +0100


This message can come up with alarming frequency in the system
eventlog of a Windows 2003 server (maybe only on domain controllers).

Searching the net for information about it yields little results.

My own research did NOT find the exact cause, BUT I do have two bits
of info:

1. on my server, the message (event ID 2510, "the server was unable
to map error code 998") went away all by itself.

2. this happened at approximately the time I decommissioned the last
Windows 98 machine on the network.

From this, I infer that the Windows 98 clients were doing something
strange with the DC - I can't say what, as there's no more 98
machines on that LAN.

To check my theory I did a quick grep of the SECURITY log (not the
system log), on event IDs 529 and 680, which I have already noticed
occur quite often when Windows 98 clients are in use.

Sure enough, the last occurrence of event ID 680 was on the same day
as the last occurence of event ID 2510. This tells me that event ID
2510 is kicked off periodically by Windows 98 clients. Once the last
98 client was terminated, the 2510 error disappeared.

That's it, I'm posting this as the net has SFA out there on event
2510, and I did indeed notice the above pattern in the logs.

Stu

---
* Origin: [adminz] tech, security, support -
http://cyberdelix.net/adminz/

generated by msg2page 0.06 on Jul 25, 2008 at 07:56:04