Antivirus software may cause Event ID 2011
This article was previously published under Q177078
After you install Norton AntiVirus for Windows or IBM AntiVirus 3.01N (Build 301.590), you receive the following error messages:
Not enough server storage is available to process this command.
Not enough memory to complete transaction. Close some applications and retry.Clients cannot access network shares. Additionally, Event Viewer on the Windows server may log one or more of the following event messages in the system log:
Event ID : 2011 Source : Srv Description: The Server's configuration parameter "IRPStackSize" is too small for the server to use a local device. Please increase the value of this parameter.
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in WindowsTo resolve this behavior, increase the IRPStackSize value in the registry:
- Click Start, and then click Run.
- Type regedit, and then click OK.
- Navigate to the following key:HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
- In the right pane, double-click the IRPStackSize value.
NOTE: If the IRPStackSize value does not already exist, use the following procedure to create it:
- In the Parameters folder of the registry, right-click the right pane.
- Point to New, and then click DWord Value.
- Type IRPStackSize.
IMPORTANT: Type "IRPStackSize" exactly as it is displayed because the value name is case-sensitive.
- Change the Base to decimal.
- In the Value Data box, type a value that is larger than the value that is listed.
If you created the IRPStackSize value using the procedure described in step 4, the default value is 15. It is recommended that you increase the value by 3. Therefore, if the previous value was 11, type 14, and then click OK.
- Close the Registry Editor.
- Restart the computer.
If you are running Windows NT 4.0, and the problem persists after you complete the preceding procedure, you may have to apply Windows NT Service Pack 4 or Service Pack 5.
In Windows NT 4.0, the default value of IRPStackSize is 0x4, and the range is from 0x4 to 0xC (4-12). Windows NT 4.0 with Service Pack 5 or later ignores values less than 0x7.
In Windows 2000, the default value of IRPStackSize is 15, and the range is from 11 to 50. In Windows XP, the default value for IRPStackSize is 15, and the range is from 11 to 50.
NOTE: The default and range of Microsoft Windows Server 2003 is the same as that for Windows XP.For more information, click the following article number to view the article in the Microsoft Knowledge Base:
106167 Error message: Not enough server storage is availableNOTE: The preceding article recommends that you increase the IrpStackSize value; however, if you increase this value to its maximum (for example, if you increase this value to the maximum value of 12 on a computer that is running Windows NT 4.0, or to the maximum of 50 on a computer running Windows 2000), this behavior may still occur.
For more information, click the following article number about IRPStackSize to view the article about IRPStackSize in the Microsoft Knowledge Base:
198386 Changes in IRP stack size in Lanman ServerFor more information, visit the following Symantec Web site:
ttp://service1.symantec.com/SUPPORT/ent-security.nsf/0/1b2df18cc3f5dedd88256ddd0082f2ea?OpenDocument&%3Bsrc=bar_sch_nam&Click=NOTE: The locations of these documents are subject to change without notice. Symantec provides these links as a convenience only. The inclusion of such links does not imply that Symantec endorses, recommends, or accepts any responsibility for the content of such sites.
Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.
Article ID: 177078 - Last Review: 05/22/2013 15:07:00 - Revision: 8.0
Microsoft Windows XP Professional, Microsoft Windows XP Home Edition, Microsoft Windows XP Professional x64 Edition, Microsoft Windows XP Media Center Edition 2005 Update Rollup 2, Microsoft Windows XP Tablet PC Edition, Microsoft Windows 2000 Advanced Server, Microsoft Windows 2000 Professional Edition, Microsoft Windows NT Workstation 4.0 Developer Edition, Microsoft Windows NT Server 4.0 Standard Edition, Microsoft Windows NT Server 4.0 Enterprise Edition, Microsoft Windows Server 2003, Standard Edition (32-bit x86)
- kb3rdparty kberrmsg kbnetwork kbprb KB177078