The system detected a possible attempt to compromise security

[Guest]

I have a machine that logs on fine and can access all of the programs and
files it needs to off of the server. However after a short time of inactvity
the machine responds with

**The system detected a possible attempt to compromise security. Please
ensure that you can contact the server that authenticated you.

The server is Windows 2000 the machine is Windows XP. This is the only
machine that is having the problem none of the other XP or 2000 machines are
having any issues. At first I thought it could be the network card but the
machine can still get on the internet and can still send/recieve email. I
have the boxes unchecked under the network card where it allows it to shut
the network card down to save power. I have taken the machine off of the
domain and re-added back. I have deleted the username out of
active-directory and readded it. This user is setup like all the other
users.

Can some one please give me some advice??
Thank you

 

[Wolf Kirchmeir]

I have a machine that logs on fine and can access all of the programs and
files it needs to off of the server. However after a short time of inactvity
the machine responds with

**The system detected a possible attempt to compromise security. Please
ensure that you can contact the server that authenticated you.

The server is Windows 2000 the machine is Windows XP. This is the only
machine that is having the problem none of the other XP or 2000 machines are
having any issues. At first I thought it could be the network card but the
machine can still get on the internet and can still send/recieve email. I
have the boxes unchecked under the network card where it allows it to shut
the network card down to save power. I have taken the machine off of the
domain and re-added back. I have deleted the username out of
active-directory and readded it. This user is setup like all the other
users.

Can some one please give me some advice??
Thank you

Sounds like malware to me. Run all your anti-virus, anti-spyware, and so
forth. Make sure you have the latest versions. The fact that you get the
warning message means that your machine is probably not yet compromised,
but some malware mimics Microsoft warning messages, and if you follow
instructions sends you to a nasty website that inserts malware into your
machine. That happened to me, once only I'm glad to say.

Good luck.

 

[Guest]

Her pc gets updated daily by the server and runs daily. Also, they sit
behind a Pix501 firewall and they all have Windows Firewall Turned on. There
are no instructions when this error appears. Just the error.

 

[Wolf Kirchmeir]

Her pc gets updated daily by the server and runs daily. Also, they sit
behind a Pix501 firewall and they all have Windows Firewall Turned on. There
are no instructions when this error appears. Just the error.

H'm. I don't have an answer, then, I'm afraid. I hope a MS certified
person can solve the puzzle.

Good luck.

 

[Steven Umbach]

If this is a domain computer make sure that it is configured with only the IP
addresses of domain controllers in it's tcp/ip properties for preferred dns
server and never an ISP dns server. You can use ipconfig /all to view that
information. I would also run the support tool netdiag on that computer and
check the system and application logs for anything that may provide a clue. I
believe that error relates to the fact that the computer can not contact the
domain controller or has lost contact with it. If the problem persists try
replacing the network card. The next time you get the error try pinging the
domain controller to see if you can access it from that computer. Nslookup could
also be used to see if it can find it's dns server and resolve names such as the
domain name which should return a list of the domain controllers. Pre SP2 XP Pro
computers also sometimes had a problem if they tried to use SMB signing with
communications to/from a Windows 2000 domain controller. SMB is controlled by
the security options for digitally sign communications. --- Steve