Results 1 to 3 of 3

Thread: LsaSrv Event ID 40960 and 40961

  1. #1
    G-Man Guest

    LsaSrv Event ID 40960 and 40961

    I've had it with this error. Any ideas? It's happening to all of my Windows
    XP Pro SP2 workstations in connection with a Windows 2000 Server.

    The Security System could not establish a secured connection with the server
    cifs/SERVER. No authentication protocol was available.

    The Security System detected an attempted downgrade attack for server
    cifs/SERVER. The failure code from authentication protocol Kerberos was
    "There are currently no logon servers available to service the logon request.
    (0xc000005e)".

    I've tried everything Microsoft has listed in the support section and
    everything I could find on multiple webpages. This is not only happening in
    my office. I have several clients that I deal with on a daily basis that are
    having the same problem with the same setup in their office. They have to
    reboot their workstations about every 24 hour period to make them work again.
    It can happen when trying to print to a network server or just trying to
    access a network drive. This is really starting to tick me off.

  2. #2
    Phil Agcaoili Guest

    RE: LsaSrv Event ID 40960 and 40961

    Is Microsoft Security Bulletin MS04-011 installed on both computers?

    If so, try this?
    http://support.microsoft.com/kb/841617

    If not, what other what other "Microsoft has listed in the support section"
    fixes have you tried? I don't repeat your resolution attempts.

    "G-Man" wrote:

    > I've had it with this error. Any ideas? It's happening to all of my Windows
    > XP Pro SP2 workstations in connection with a Windows 2000 Server.
    >
    > The Security System could not establish a secured connection with the server
    > cifs/SERVER. No authentication protocol was available.
    >
    > The Security System detected an attempted downgrade attack for server
    > cifs/SERVER. The failure code from authentication protocol Kerberos was
    > "There are currently no logon servers available to service the logon request.
    > (0xc000005e)".
    >
    > I've tried everything Microsoft has listed in the support section and
    > everything I could find on multiple webpages. This is not only happening in
    > my office. I have several clients that I deal with on a daily basis that are
    > having the same problem with the same setup in their office. They have to
    > reboot their workstations about every 24 hour period to make them work again.
    > It can happen when trying to print to a network server or just trying to
    > access a network drive. This is really starting to tick me off.


  3. #3
    G-Man Guest

    RE: LsaSrv Event ID 40960 and 40961

    I haven't manually installed that update so unless it's rolled out
    automatically through the Windows Update, the answer is no.

    This is what I've tried so far:
    823712 - I disabled the time service to test this
    I also created a reverse lookup zone in the DNS because some people said
    they solved their problem this way. No long term success for me.
    Keep in mind this isn't happening on the server. The server logs for the
    same time period show nothing. It's only happening on the workstations. And
    it doesn't happen every day. It does, however, force a user to lose anything
    network related they were working on so this is a serious issue.

    There were a few other tricks that I tested (can't remember them all) with
    no luck. And now it happened yesterday to a friend of mine that has a Windows
    2003 SBE Server and all Windows XP Pro SP2 workstations. Two of their
    workstations had it happen as well. So this isn't just an isolated incident.


    "Phil Agcaoili" wrote:

    > Is Microsoft Security Bulletin MS04-011 installed on both computers?
    >
    > If so, try this?
    > http://support.microsoft.com/kb/841617
    >
    > If not, what other what other "Microsoft has listed in the support section"
    > fixes have you tried? I don't repeat your resolution attempts.
    >
    > "G-Man" wrote:
    >
    > > I've had it with this error. Any ideas? It's happening to all of my Windows
    > > XP Pro SP2 workstations in connection with a Windows 2000 Server.
    > >
    > > The Security System could not establish a secured connection with the server
    > > cifs/SERVER. No authentication protocol was available.
    > >
    > > The Security System detected an attempted downgrade attack for server
    > > cifs/SERVER. The failure code from authentication protocol Kerberos was
    > > "There are currently no logon servers available to service the logon request.
    > > (0xc000005e)".
    > >
    > > I've tried everything Microsoft has listed in the support section and
    > > everything I could find on multiple webpages. This is not only happening in
    > > my office. I have several clients that I deal with on a daily basis that are
    > > having the same problem with the same setup in their office. They have to
    > > reboot their workstations about every 24 hour period to make them work again.
    > > It can happen when trying to print to a network server or just trying to
    > > access a network drive. This is really starting to tick me off.


Similar Threads

  1. 40960, 40961 System Event errors:
    By Mike Bonvie in forum Active Directory
    Replies: 3
    Last Post: 17-12-2009, 12:15 AM
  2. Event ID : 40960 LSAsrv / SPNego
    By Iraiyavan in forum Active Directory
    Replies: 3
    Last Post: 19-11-2009, 03:04 PM
  3. Event ID 40960 LSASRV SPNEGO
    By SB in forum Windows Server Help
    Replies: 1
    Last Post: 01-03-2007, 03:01 PM
  4. Event ID 40960 + 40961 / SPNEGO
    By Spencer in forum Windows XP Support
    Replies: 3
    Last Post: 15-11-2006, 08:47 PM
  5. LSASRV Event ID: 40961
    By =?Utf-8?B?TWlrZSBCbGFrZQ==?= in forum Windows Server Help
    Replies: 6
    Last Post: 22-01-2005, 08:25 PM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,711,724,637.38790 seconds with 17 queries