Event ID 40960 error 0xc000006d after power failure
We are using AD forest and there are 3 domains trusting one another, like for example DomainA, DomainB and DomainC. Many of the corp wide services are on servers under the main domain that is DomainA. Recently, there was a power cut and the backup generator did not work at that time, so all the servers are now power cycled. Since then, users who are under DomainB are having issues accessing network resources under DomainA, taking shared folders as for example. I am getting the following in the event log:
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 10/14/2008
Time: 6:52:13 AM
User: N/A
Computer: CTMAIN2
Description:
The Security System detected an authentication error for the server ldap/server1.casc.local/casc.local@CASC.LOCAL. The failure code from authentication protocol Kerberos was "The attempted logon is invalid. This is either due to a bad username or authentication information. (0xc000006d)".
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 00 c0 m..À
*********************************************************************
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 10/13/2008
Time: 3:41:07 PM
User: N/A
Computer: CTMAIN2
Description:
The Security System detected an authentication error for the server cifs/casc.local. The failure code from authentication protocol Kerberos was "The attempted logon is invalid. This is either due to a bad username or authentication information. (0xc000006d)".
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 00 c0 m..À
*********************************************************************
Re: Event ID 40960 error 0xc000006d after power failure
If the errors only occur after the server has been rebooted, it is likely that a service is attempting to authenticate before the directory service is available. For more information, go to this website - http://support.microsoft.com/kb/824217
Re: Event ID 40960 error 0xc000006d after power failure
It looks to me that a service is trying to authenticate before the directory service is available. You can try to restart your machine and see if that works. Or else try to disable the computer account password changes on the affected host an rejoin the domain, go to the below registry key to change the following:
HLM\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters
"DisablePasswordChange"=dword:00000001
Re: Event ID 40960 error 0xc000006d after power failure
You can try to troubleshoot with some solutions that I am going to provide you. First try to remove any additional default gateway from each network interface. After that configure only the primary and secondary DNS servers for each server network interface. Lastly try to remove the DNS servers that are not domain members from NAME Servers settings on domain DNS systems.