LSASRV errors (ID 40960 and 40961)

H

Henrik Boes

Hello,

I'm running into errors in the system event log that have me a bit
baffled. I'll post them below but the upshot appears to be that the XP
system in question seems to be constantly attempting to set up some
sort of secure connection with the DC and failing. I came across this
when troubleshooting a network-related slowdown this XP system is
exhibiting (saving to the network can take ridiculous amounts of time,
even when there is no network or server load to speak of). I'm not sure
the slowdown and the errors are connected but thought it would worth
exploring a possible link.

There seems to be no further info on this matter on technet and the XP
help system was not able to find anything on this either. Any thoughts?

-----

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 7/7/2003
Time: 11:59:26 AM
User: N/A
Computer: TEST
Description:
The Security System detected an attempted downgrade attack for
server HTTP/Mmaserver. The failure code from authentication protocol
Kerberos was "There are currently no logon servers available to service
the logon request.
(0xc000005e)".

For more information, see Help and Support Center at http://
go.microsoft.com/fwlink/events.asp.



Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 7/7/2003
Time: 11:50:47 AM
User: N/A
Computer: TEST
Description:
The Security System could not establish a secured connection with the
server cifs/Mmaserver. No authentication protocol was available.

For more information, see Help and Support Center at http://
go.microsoft.com/fwlink/events.asp.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top