Event 40961

[Raymond Nichols]

I am using 2003 Server as a domain controller on a local network not
connected to the Internet. I am receiving the below Event message and do
not understand the problem. I have no idea where the prisoner.iana.org it
is referring to is coming from. This is the only server and all DNS
resolution is done on it. I read the Event description in the knowledge
base and still do not know where to look. Any help will be truly
appreciated.

Ray Nichols

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 1/9/2004
Time: 10:30:45 PM
User: N/A
Computer: HQ-RGN-DC-01
Description:
The Security System could not establish a secured connection with the server
DNS/prisoner.iana.org. No authentication protocol was available.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 00 c0 m..À

 

[Guest]

Hi
I did a search i found this
http://www.eventid.net/display.asp?eventid=40960&source
http://www.jsifaq.com/SUBL/tip5600/rh5612.ht

Regards
Jan Gustavsso

----- Raymond Nichols wrote: ----

I am using 2003 Server as a domain controller on a local network no
connected to the Internet. I am receiving the below Event message and d
not understand the problem. I have no idea where the prisoner.iana.org i
is referring to is coming from. This is the only server and all DN
resolution is done on it. I read the Event description in the knowledg
base and still do not know where to look. Any help will be trul
appreciated

Ray Nichol

Event Type: Warnin
Event Source: LSASR
Event Category: SPNEGO (Negotiator
Event ID: 4096
Date: 1/9/200
Time: 10:30:45 P
User: N/
Computer: HQ-RGN-DC-0
Description
The Security System could not establish a secured connection with the serve
DNS/prisoner.iana.org. No authentication protocol was available

For more information, see Help and Support Center a
http://go.microsoft.com/fwlink/events.asp
Data
0000: 6d 00 00 c0 m..Ã

 

[Mark A. Ziesemer]

I've had the same problem, and am almost positive I found a working
fix (it works on my systems). I had previously tried all the other
mentioned solutions, including disabling Dynamic DNS, turning on or
off the option for the network adapters to request registration in
DNS, adding reverse lookup zones, etc, but to no avail.

My solution is probably only applicable to domain controllers running
the DNS server service. These errors seem to be generated by programs
trying to resolve domain names to connect back to the server to
authenticate, but can't find it if the DNS server service hasn't
started yet, failing the request. The solution seems to be adding DNS
as a dependency to these services. On a clean Windows 2003
installation, promoted to a DC, with IIS installed, I needed to make
W32Time (Windows Time Service), NtFrs (File Replication Service), and
SMTPSVC (Simple Mail Transfer Protocol (SMTP)) dependent upon DNS (DNS
Server). See http://support.microsoft.com/default.aspx?scid=kb;en-us;193888&Product=win2000
for details on how to do this.