Event ID: 40960 SPNEGO (Negotiator) authentication error
Hi!
I have upgraded one of my domaincontrollers from Windows 2000 to Windows
2003.
I have still got one domaincontroller that is windows 2000.
The 2003 DC have the FSMO roles, both DC's has the global catalog and
running DNS server .
After the upgrade I frequently get error loggings on 3 of my Windows 2003
memberservers.
I get Lsasrv Event ID 40960 and 40961 in the systemlogs one to two times a
day.
I tried to restart one of the memberservers and then the logging stopped for
a week.
I have installed one new server after the upgrade of the domain, on that
server I don't get any
errors. I don't have any lsasrv errors on my windows 2000 memberservers or
the domaincontrollers. I been reading the suggestions on Event id net
regarding this error, but no luck when it comes to solving the problem.
I have tried to find the error with netdiag. but every test gets passed.
Has anyone a solution to this problem?
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 2006-04-05
Time: 05:59:15
User: N/A
Computer: vidstige
Description:
The Security System detected an authentication error for the server
cifs/donald.test.nu. The failure code from authentication protocol Kerberos
was "The attempted logon is invalid. This is either due to a bad username or
authentication information.
(0xc000006d)".
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 00 c0
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 2006-04-05
Time: 05:59:15
User: N/A
Computer: vidstige
Description:
The Security System could not establish a secured connection with the server
cifs/donald.test.nu. No authentication protocol was available.
Re: Event ID: 40960 SPNEGO (Negotiator) authentication error
Are you experiencing any problems with users being able to access resources
or other problems? IMHO if not I would not worry about it as an error one or
two times a day as most likely nothing to worry about if everything works
fine and you have already done your homework with netdiag and checking
EventID.net. The link below is to a Google search on that Event ID where
you may find some more info. --- Steve
http://www.google.com/search?hl=en&l...GO&btnG=Search
"Mauricio Reyes" <maoreyes@hotmail.com> wrote in message
news:eF5ubOhWGHA.1220@TK2MSFTNGP02.phx.gbl...
> Hi!
> I have upgraded one of my domaincontrollers from Windows 2000 to Windows
> 2003.
> I have still got one domaincontroller that is windows 2000.
> The 2003 DC have the FSMO roles, both DC's has the global catalog and
> running DNS server .
> After the upgrade I frequently get error loggings on 3 of my Windows 2003
> memberservers.
> I get Lsasrv Event ID 40960 and 40961 in the systemlogs one to two times
> a
> day.
> I tried to restart one of the memberservers and then the logging stopped
> for
> a week.
> I have installed one new server after the upgrade of the domain, on that
> server I don't get any
> errors. I don't have any lsasrv errors on my windows 2000 memberservers or
> the domaincontrollers. I been reading the suggestions on Event id net
> regarding this error, but no luck when it comes to solving the problem.
> I have tried to find the error with netdiag. but every test gets passed.
>
> Has anyone a solution to this problem?
>
>
> Event Type: Warning
> Event Source: LSASRV
> Event Category: SPNEGO (Negotiator)
> Event ID: 40960
> Date: 2006-04-05
> Time: 05:59:15
> User: N/A
> Computer: vidstige
> Description:
> The Security System detected an authentication error for the server
> cifs/donald.test.nu. The failure code from authentication protocol
> Kerberos
> was "The attempted logon is invalid. This is either due to a bad username
> or
> authentication information.
> (0xc000006d)".
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 6d 00 00 c0
>
> Event Type: Warning
> Event Source: LSASRV
> Event Category: SPNEGO (Negotiator)
> Event ID: 40961
> Date: 2006-04-05
> Time: 05:59:15
> User: N/A
> Computer: vidstige
> Description:
> The Security System could not establish a secured connection with the
> server
> cifs/donald.test.nu. No authentication protocol was available.
>
>
>