Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

NDIS 5.x Intermediate Filter drivers are incompatible with Network Load Balancing (NLB.SYS)

View products that this article applies to.


The Microsoft Network Load Balancer (NLB.SYS) is incompatible with NDIS 5.0 and NDIS 5.1 Intermediate Filter drivers.

↑ Back to the top

More information


Use of any product that employs an NDIS 5.x Intermediate Filter driver, based on the DDK/WDK sample PASSTHRU, will cause the Microsoft Network Load Balancer (NLB) driver to fail.  NDIS IM Filter drivers are used in many firewall, antivirus and VPN products.  Windows Vista, Windows Server 2008 and all operating systems following, use NDIS 6.  While NDIS 5 components are supported in NDIS 6 environments, there are limitations.  A NDIS IM filter should be ported to either a NDIS 6 Lightweight Filter (LWF) or use the Windows Filtering Platform (WFP), depending on the driver�s purpose.


NLB.SYS is a NDIS Lightweight Filter driver (LWF).  When a NDIS 5 IM driver is layered in the same stack, NLB.SYS� FilterAttachHandler is called twice.  The second call to attach fails, so initializing NLB fails.


After installing a product that uses a NDIS 5.x IM driver when NLB is also installed, network icons disappear and IPconfig does no longer show network adapters.  The Network Load Balancer will record Event IDs 34, 88 and 98 to the System Event Log from �Microsoft-Windows-NLB�.

↑ Back to the top

Keywords: KB2021976

↑ Back to the top

Article Info
Article ID : 2021976
Revision : 1
Created on : 3/25/2010
Published on : 3/25/2010
Exists online : False
Views : 341