Weird Errors in Sytstem Log

[Hareth]

I always (everyday atleast 3 times), get two weird errors:

Does anyone know what they are, how they can be stopped?
It seems like someone is spying on my server, forcing it to ping to those
addresses. What can I do?


Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 8/16/2004
Time: 12:14:16 AM
User: N/A
Computer: --------
Description:
The Security System could not establish a secured connection with the server
DNS/prisoner.iana.org. No authentication protocol was available.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 8b 01 00 c0 ‹..À

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 8/16/2004
Time: 12:14:15 AM
User: N/A
Computer: --------
Description:
The Security System could not establish a secured connection with the server
DNS/extns1.nuvox.net. No authentication protocol was available.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 8b 01 00 c0 ‹..À

I tried to check the websites in IE, one shows up a "under construction"
page (prisoner.iana.org), the other doesnt even exist. If anyone can help me
permanently remove the service, I will be really grateful. This is a serious
problem b/c I dont know what they are & they show up alot!!

 

[Frank Szita [MSFT]]

Those error may have to do with a timing issue with the server coming
online and attempting to register in DNS. This is described in Microsoft
Knowledge Base articles 823712 (http://support.microsoft.com/?id=823712)
and 824217 (http://support.microsoft.com/?id=824217). If you don't have a
reverse lookup zone configured for your subnets then try to add those
subnets in the reverse lookup zones in DNS.

Best regards,

Frank Szita [MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights.
OR if you wish to include a script sample in your post please add "Use of
included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"

 

[Dave]

Hi

I get this error occasionally on Win XP

Take a look at the additional info from windows help:

Details
Product: Windows Operating System
ID: 40961
Source: LSASRV
Version: 5.2
Symbolic Name: NEGOTIATE_INVALID_SERVER
Message: The Security System could not establish a secured
connection with the server %1. No authentication protocol was available.

Explanation
The Negotiate package could not select a secure authentication
protocol because the user provided incorrect credentials or because the
domain controller was temporarily unavailable.


User Action
By the time this log is viewed, usually the problem has been
resolved.



--------------------------------------------------------------------------


Currently there are no Microsoft Knowledge Base articles
available for this specific error or event message. For information about
other support options you can use to find answers online, see
http://support.microsoft.com/default.aspx.



Regard

Dave

 

[mike menard]

try using eventid.net and search on the error number.

mike

 

[Ace Fekay [MVP]]

In

Hi

I get this error occasionally on Win XP

Take a look at the additional info from windows help:

Details
Product: Windows Operating System
ID: 40961
Source: LSASRV
Version: 5.2
Symbolic Name: NEGOTIATE_INVALID_SERVER
Message: The Security System could not establish a secured
connection with the server %1. No authentication protocol was
available.

<snip>


The explanation that Deji gave for the other poster above (to create a
reverse zone for your subnet) should take care of this problem.

Also, make absolutely sure you are ONLY using your internal DNS server(s)
and NOT using an ISP's DNS or any other external DNS server IP address in
any internal machine's IP properties.

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.

 

[Ryan J Jones]

Thank so much for you help...I was receiving the same messages in the
event log, and creating a reverse zone for both my private networks
solved the problem. U ROCK!

Ryan Jones
(e-mail address removed)
www.webmergeinc.com