Event ID 40960 & 40961

[Guest]

I am running Windows XP Pro SP2 w/ all the latest updates.
My account keeps getting locked out at random. I am seeing the following
error messages in Event Viewer:

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 10/6/2006
Time: 3:38:58 AM
User: N/A
Computer: computer3
Description:
The Security System detected an attempted downgrade attack for server
cifs/Domaincontroller.mydomain.net. The failure code from authentication
protocol Kerberos was "The user account has been automatically locked because
too many invalid logon attempts or password change attempts have been
requested.
(0xc0000234)".
_________________________________________________________________

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 10/6/2006
Time: 3:38:58 AM
User: N/A
Computer: computer3
Description:
The Security System could not establish a secured connection with the server
cifs/domaincontroller.mydomain.net. No authentication protocol was available.

 

[LittleMoo]

See these two pages and try the suggestions of the people that posted
errors/solutions.

EventID 40960:
http://www.eventid.net/display.asp?eventid=40960&eventno=787&source=LsaSrv&phase=1
EventID 40961:
http://www.eventid.net/display.asp?eventid=40961&eventno=1398&source=LsaSrv&phase=1

This website is a great resource for getting information and solutions to
problems, so if you're ever having problems with your computer look in Event
Viewer for errors and search the Event number on this site.

-Dan