Exchange 2016 on Server 2012 TCPIP warning message

Article
2017-02-27

Question

_{Monday, February 27, 2017 8:12 PM}

Hey everyone - I have a new exchange 2016 server we are migrating to, I have stopped because the server keeps producing in the system log warning messages, eventid 4230 TCPIP "TCP/IP has chosen to restrict the congestion window for several connections due to a network condition. This could be related to a problem in the TCP global or supplemental configuration and will cause degraded throughput. "

It does it every day, cant find much on the topic - as anyone run into this? Im worried its some performance issue

All replies (3)

_{Tuesday, February 28, 2017 8:41 AM}

Hi,

The error message” Tcpip Event ID 4230” is mainly caused due to the Peer to Peer network connectivity issue.

Please update the NIC driver to the latest version, then monitor it.

Please follow the below steps to find if the issue is with the PNP network:

1. At the command prompt, type

Netstat –no

2. Find the process with a large number of open connections that are not yet established.

These connections are indicated by the TCP state SYN_SENT in the State column of the Active Connections information.

3. Note the process identification number (PID) of the process in the PID column.

4. Press CTRL+ALT+DELETE and then click Task Manager.

5. On the Processes tab, select the processes with the matching PID, and then click End Process.

It’s also recommended to refer to the KB: https://support.microsoft.com/en-sg/help/2686098/-system-error-2148073478,-extended-error,-or-invalid-signature-error-message-on-smb-connections-in-windows-server-2012-or-windows-8

Hope it helps.

Regards,

Jason Chao

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Tuesday, February 28, 2017 7:54 PM}

Hi I ran the netstat - no and all i have is established connections

Any other suggestions?

_{Thursday, March 9, 2017 2:02 AM}

Thanks for your response. Sorry for later response.

What’s the detailed version of your Exchange server? I’ve seen this issue with Exchange server 2016 CU2, it’s recommended to update to the latest version Exchange server 2016 CU4.

Could you run the command below and post out the results?

Get-NetTransportFilter

1. To investigate why TCP/IP has restricted connection window for several connections, we need to investigate TCP connection status when this event is logged. So we created a batch file with the command: netstat –anob >netstat.exe

This batch file has been attached as a task to Event 4230 to run when this event gets logged. We request you to perform this on all servers.

2. It is possible that a third party component (like a filter driver) may be causing this issue. So we have requested you to reboot one of the servers in Safe Mode with Networking.

You can then monitor this server to find out if the above event still gets logged.

Refer following article on rebooting server in Safe Mode with Networking.

https://support.microsoft.com/en-in/help/17419/windows-7-advanced-startup-options-safe-mode