SPNEGO 40961 - USERENV 1030

[miloja99]

Hi MS techies!

im having problem with that events on my XP SP2 clients. We have
Windows 2003 SP1 as DC .
Every day i see in the event log this warnings. I read all the advices
about , but nothing applied for me.
This problem appear before apply SP2 . Currently Kerberos is using TCP
(registry trick applied)
The network has 2 DC with 2 DNS installed, Reverse Lookup zone its ok,
netdiag Ok, DNS ok,
policies apply ok.

Its seems like the workstation cannot establish a secure connection
with the server.
I have no idea to do.May be a missconfigured server? please Help
me!!!

txs!

 

[Phill]

On technet userenv 1030 seems to point to DFS.

 

[Jerold Schulman]

Hi MS techies!

im having problem with that events on my XP SP2 clients. We have
Windows 2003 SP1 as DC .
Every day i see in the event log this warnings. I read all the advices
about , but nothing applied for me.
This problem appear before apply SP2 . Currently Kerberos is using TCP
(registry trick applied)
The network has 2 DC with 2 DNS installed, Reverse Lookup zone its ok,
netdiag Ok, DNS ok,
policies apply ok.

Its seems like the workstation cannot establish a secure connection
with the server.
I have no idea to do.May be a missconfigured server? please Help
me!!!

txs!

http://support.microsoft.com?kbid=885887 "You cannot access network resources after you try to log on to a Windows XP Service Pack 2-based computer "
http://support.microsoft.com?kbid=891559 "You cannot access resources after you install Security Bulletin MS04-011 or Windows XP Service Pack 2 "

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

 

[Miloja99]

Hi Jerold


All this KBs checked , nothing work, nothing to apply, txs a lot
anyway. greetings

 

[Guest]

I am having the exact same problem. According to the Support Article ID #
891559, this is due to installing Microsoft Security Bulletin MS04-011 or
Microsoft Windows XP Service Pack 2 (SP2) when a domain controller is
unavailable.

The only solutions the article lists are:

1. "You can log on to the system with a local account."
- I don't see how this is a solution since I need to log onto the domain
with a domain account in order to use domain resources.

2. "You can make a domain controller available to the computer."
- This is a pretty non-specific answer and I don't know at this time what
they mean by "make a domain controller available to the computer."

The laptop computer I'm working with cannot see any other computers on the
domain and when I attempt to join the computer to the domain under a
different name, it says it cannot find the domain. I have seen lots of
solutions related to Event ID 40961 regarding Domain Controllers, but I have
yet to find a solution to this problem that works.

 

[DanS]

I am having the exact same problem. According to the Support Article
ID # 891559, this is due to installing Microsoft Security Bulletin
MS04-011 or Microsoft Windows XP Service Pack 2 (SP2) when a domain
controller is unavailable.

The only solutions the article lists are:

1. "You can log on to the system with a local account."
- I don't see how this is a solution since I need to log onto the
domain with a domain account in order to use domain resources.

Not true, you can use domain resources without logging into the domain.

You can map drives and connect to printers. All that is needed is the IP
of the shared resource and the share name.

For instance, to map a shared drive, open the 'Map Network Drive' dialog
from the 'Tools' menu in explorer, set the letter you want. Where it says
'Folder', you most likely won't be able to browse for it, so you enter an
IP with the share name preceded by \\.........

\\192.168.1.50\c

Click 'Connect using a different user name'. In the username field, enter
you domain username preceded by the domain name.....

DOMAINNAME\Username (it might be a forward slash..it's been a while.)
Enter your password, and click OK.

Same deal for printer, you just have to do it manually.

Regards,

DanS