Results 1 to 4 of 4

Thread: Event ID 40960 error 0xc000006d after power failure

  1. #1
    Join Date
    Jun 2006
    Posts
    200

    Event ID 40960 error 0xc000006d after power failure

    We are using AD forest and there are 3 domains trusting one another, like for example DomainA, DomainB and DomainC. Many of the corp wide services are on servers under the main domain that is DomainA. Recently, there was a power cut and the backup generator did not work at that time, so all the servers are now power cycled. Since then, users who are under DomainB are having issues accessing network resources under DomainA, taking shared folders as for example. I am getting the following in the event log:

    Event Type: Warning
    Event Source: LSASRV
    Event Category: SPNEGO (Negotiator)
    Event ID: 40960
    Date: 10/14/2008
    Time: 6:52:13 AM
    User: N/A
    Computer: CTMAIN2
    Description:
    The Security System detected an authentication error for the server ldap/server1.casc.local/casc.local@CASC.LOCAL. The failure code from authentication protocol Kerberos was "The attempted logon is invalid. This is either due to a bad username or authentication information. (0xc000006d)".

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 6d 00 00 c0 m..À
    *********************************************************************
    Event Type: Warning
    Event Source: LSASRV
    Event Category: SPNEGO (Negotiator)
    Event ID: 40960
    Date: 10/13/2008
    Time: 3:41:07 PM
    User: N/A
    Computer: CTMAIN2
    Description:
    The Security System detected an authentication error for the server cifs/casc.local. The failure code from authentication protocol Kerberos was "The attempted logon is invalid. This is either due to a bad username or authentication information. (0xc000006d)".

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 6d 00 00 c0 m..À
    *********************************************************************

  2. #2
    Join Date
    Feb 2006
    Posts
    335

    Re: Event ID 40960 error 0xc000006d after power failure

    If the errors only occur after the server has been rebooted, it is likely that a service is attempting to authenticate before the directory service is available. For more information, go to this website - http://support.microsoft.com/kb/824217

  3. #3
    Join Date
    May 2009
    Posts
    511

    Re: Event ID 40960 error 0xc000006d after power failure

    It looks to me that a service is trying to authenticate before the directory service is available. You can try to restart your machine and see if that works. Or else try to disable the computer account password changes on the affected host an rejoin the domain, go to the below registry key to change the following:

    HLM\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters
    "DisablePasswordChange"=dword:00000001

  4. #4
    Join Date
    Apr 2008
    Posts
    2,005

    Re: Event ID 40960 error 0xc000006d after power failure

    You can try to troubleshoot with some solutions that I am going to provide you. First try to remove any additional default gateway from each network interface. After that configure only the primary and secondary DNS servers for each server network interface. Lastly try to remove the DNS servers that are not domain members from NAME Servers settings on domain DNS systems.

Similar Threads

  1. Event ID : 40960 LSAsrv / SPNego
    By Iraiyavan in forum Active Directory
    Replies: 3
    Last Post: 19-11-2009, 03:04 PM
  2. Event ID 40960 LSASRV SPNEGO
    By SB in forum Windows Server Help
    Replies: 1
    Last Post: 01-03-2007, 03:01 PM
  3. Event ID 40960 + 40961 / SPNEGO
    By Spencer in forum Windows XP Support
    Replies: 3
    Last Post: 15-11-2006, 08:47 PM
  4. Event ID: 40960 SPNEGO (Negotiator) authentication error
    By Mauricio Reyes in forum Windows Security
    Replies: 1
    Last Post: 07-04-2006, 11:47 PM
  5. LsaSrv Event ID 40960 and 40961
    By G-Man in forum Windows Security
    Replies: 2
    Last Post: 15-02-2005, 03:55 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,728,101,306.02449 seconds with 17 queries