LSASRV Event ID 40960

[Erik Bucker]

Hello all!

I have a customer who is experimenting with VPN right now
and I have come across a "problem" connecting to the home
network from a client via VPN.

The VPN consists of an SSH sentinel client connecting to a
Linksys router. My problem is this, if the client starts
a VPN tunnel with the router, she can ping any IP on the
internal network no problem. But if she tries to connect
to the server (Windows 2000 SBS), her Windows XP client
logs an event id 40960 and a dialogue box pops up saying
that there was a security compromise detected.

Now, if I switch her over to using a static DNS server
entry on the internal network (she is getting her IP info
dynamically from her ISP), the problem goes away and she
is able to access the server. The dilemma with this
solution is that she can only browse internet and get
email when connected to the VPN (because she is no longer
using her ISP's DNS servers). The REALLY interesting part
about this is that it only occurs when she is using her
cable company's internet service. If she dials up she
doesn't have this problem.

Is there a workaround for this issue? I have tried the KB
and several internet sites to no avail!

Thanks in advance for any help!

 

[Alex]

try setting the value described in this article to '1'
http://support.microsoft.com/default.aspx?scid=kb;en-us;244474&Product=winxp
Please post back if it works,
we just had similar issues in our network after turning
our Active Directory into native mode..