Go Back   TechArena Community > Technical Support > Computer Help > Windows Security
Become a Member!
Forgot your username/password?
Tags Active Topics RSS Search Mark Forums Read

Sponsored Links



LsaSrv Event ID 40960 and 40961

Windows Security


Reply
 
Thread Tools Search this Thread
  #1  
Old 11-02-2005
G-Man
 
Posts: n/a
LsaSrv Event ID 40960 and 40961

I've had it with this error. Any ideas? It's happening to all of my Windows
XP Pro SP2 workstations in connection with a Windows 2000 Server.

The Security System could not establish a secured connection with the server
cifs/SERVER. No authentication protocol was available.

The Security System detected an attempted downgrade attack for server
cifs/SERVER. The failure code from authentication protocol Kerberos was
"There are currently no logon servers available to service the logon request.
(0xc000005e)".

I've tried everything Microsoft has listed in the support section and
everything I could find on multiple webpages. This is not only happening in
my office. I have several clients that I deal with on a daily basis that are
having the same problem with the same setup in their office. They have to
reboot their workstations about every 24 hour period to make them work again.
It can happen when trying to print to a network server or just trying to
access a network drive. This is really starting to tick me off.

Reply With Quote
  #2  
Old 14-02-2005
Phil Agcaoili
 
Posts: n/a
RE: LsaSrv Event ID 40960 and 40961

Is Microsoft Security Bulletin MS04-011 installed on both computers?

If so, try this?
http://support.microsoft.com/kb/841617

If not, what other what other "Microsoft has listed in the support section"
fixes have you tried? I don't repeat your resolution attempts.

"G-Man" wrote:

> I've had it with this error. Any ideas? It's happening to all of my Windows
> XP Pro SP2 workstations in connection with a Windows 2000 Server.
>
> The Security System could not establish a secured connection with the server
> cifs/SERVER. No authentication protocol was available.
>
> The Security System detected an attempted downgrade attack for server
> cifs/SERVER. The failure code from authentication protocol Kerberos was
> "There are currently no logon servers available to service the logon request.
> (0xc000005e)".
>
> I've tried everything Microsoft has listed in the support section and
> everything I could find on multiple webpages. This is not only happening in
> my office. I have several clients that I deal with on a daily basis that are
> having the same problem with the same setup in their office. They have to
> reboot their workstations about every 24 hour period to make them work again.
> It can happen when trying to print to a network server or just trying to
> access a network drive. This is really starting to tick me off.

Reply With Quote
  #3  
Old 15-02-2005
G-Man
 
Posts: n/a
RE: LsaSrv Event ID 40960 and 40961

I haven't manually installed that update so unless it's rolled out
automatically through the Windows Update, the answer is no.

This is what I've tried so far:
823712 - I disabled the time service to test this
I also created a reverse lookup zone in the DNS because some people said
they solved their problem this way. No long term success for me.
Keep in mind this isn't happening on the server. The server logs for the
same time period show nothing. It's only happening on the workstations. And
it doesn't happen every day. It does, however, force a user to lose anything
network related they were working on so this is a serious issue.

There were a few other tricks that I tested (can't remember them all) with
no luck. And now it happened yesterday to a friend of mine that has a Windows
2003 SBE Server and all Windows XP Pro SP2 workstations. Two of their
workstations had it happen as well. So this isn't just an isolated incident.


"Phil Agcaoili" wrote:

> Is Microsoft Security Bulletin MS04-011 installed on both computers?
>
> If so, try this?
> http://support.microsoft.com/kb/841617
>
> If not, what other what other "Microsoft has listed in the support section"
> fixes have you tried? I don't repeat your resolution attempts.
>
> "G-Man" wrote:
>
> > I've had it with this error. Any ideas? It's happening to all of my Windows
> > XP Pro SP2 workstations in connection with a Windows 2000 Server.
> >
> > The Security System could not establish a secured connection with the server
> > cifs/SERVER. No authentication protocol was available.
> >
> > The Security System detected an attempted downgrade attack for server
> > cifs/SERVER. The failure code from authentication protocol Kerberos was
> > "There are currently no logon servers available to service the logon request.
> > (0xc000005e)".
> >
> > I've tried everything Microsoft has listed in the support section and
> > everything I could find on multiple webpages. This is not only happening in
> > my office. I have several clients that I deal with on a daily basis that are
> > having the same problem with the same setup in their office. They have to
> > reboot their workstations about every 24 hour period to make them work again.
> > It can happen when trying to print to a network server or just trying to
> > access a network drive. This is really starting to tick me off.

Reply With Quote
Reply

  TechArena Community > Technical Support > Computer Help > Windows Security
Tags: , ,



Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads for: "LsaSrv Event ID 40960 and 40961"
Thread Thread Starter Forum Replies Last Post
40960, 40961 System Event errors: Mike Bonvie Active Directory 3 17-12-2009 12:15 AM
Event ID : 40960 LSAsrv / SPNego Iraiyavan Active Directory 3 19-11-2009 03:04 PM
Event ID 40960 LSASRV SPNEGO SB Windows Server Help 1 01-03-2007 03:01 PM
Event ID 40960 + 40961 / SPNEGO Spencer Windows XP Support 3 15-11-2006 08:47 PM
LSASRV Event ID: 40961 =?Utf-8?B?TWlrZSBCbGFrZQ==?= Windows Server Help 6 22-01-2005 08:25 PM


All times are GMT +5.5. The time now is 03:59 PM.