RE: SPNEGO 40961 & USERENV 1030 errors

From: William Wang[MSFT] (v-rxwang_at_online.microsoft.com)
Date: 05/05/04


Date: Wed, 05 May 2004 12:53:11 GMT

Hi,

I noticed that you have cross-posted this thread in
multiple newsgroups. I suggest that we focus on this
issue in only one newsgroup to ensure that we are not
counter-productive in our support efforts. If you
have any questions or concerns, please don't hesitate
to let us know.

Regarding to this issue, I'd like to disjoin the
computer from the domain and then rejoin it to test
if the issue still occurs.

If the problem persists, I'd like to check the
following to get a better picture of this issue.

1. Is this issue machine-specific or user-specific?

2. Please send the NT event logs to me at
v-rxwang@microsoft.com.

3. Please send me the screenshot of message that RSOP
gives.

Sincerely,

William Wang
Microsoft Online Support Engineer

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties,
and confers no rights.
--------------------
>From: "curt" <friendly_curt@hotmail.com>
>Subject: SPNEGO 40961 & USERENV 1030 errors
>Date: Tue, 4 May 2004 15:45:25 -0500
>Lines: 24
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express
6.00.2800.1409
>X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2800.1409
>Message-ID: <u9IWdihMEHA.2976@TK2MSFTNGP10.phx.gbl>
>Newsgroups: microsoft.public.windowsxp.general
>NNTP-Posting-Host:
217.wi15.chcg.cgcil02r18.dsl.att.net 12.134.15.217
>Path:
cpmsftngxa10.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP0
8.phx.gbl!TK2MSFTNGP10.phx.gbl
>Xref: cpmsftngxa10.phx.gbl
microsoft.public.windowsxp.general:941601
>X-Tomcat-NG: microsoft.public.windowsxp.general
>
>I have a SBS 2003 and four XP workstations. My group
policy updates fine in
>three of them, but about a month ago one started
showing an LSASRV / SPNEGO
>(Negotiator) system event error 40961 with text "The
Security System could
>not establish a secured connection with the server
>ldap/XPX.expmix.local/expmix.local@expmix.local. No
authentication protocol
>was available." and a USERENV application error 1030
with text "Windows
>cannot query for the list of Group Policy objects. A
message that describes
>the reason for this was previously logged by the
policy engine." when I
>logon under my user name. I already searched all KB,
reset the local policy
>in the workstation, ran dfsutil /purgemupcache as
well as netdiag /fix and
>gpupdate /force. Nothing helped.
>
>When I run netdiag in verbose everything shows up
without any errors or
>problems. Permissions for the Security folder are
also correct. The server's
>SYSVOL is accessible through the AD Snap-in and from
the command line. Yet,
>while the machine and security policies update fine
in the workstation, the
>user policy doesn't doesn't copy at all. When I run
a RSoP query I get the
>message it gives me an error message that the user
policy was never
>successfully processed and shows "Invalid Namespace"
in the popup's Detail.
>Can anyone help?
>
>Thanks.
>
>
>



Relevant Pages

  • RE: Remote Installation Services, DoOldStyleDomainJoin=Yes
    ... It appears that the policy had been set previoulsy but when the policy was ... > SP1 introduced additonal RPC and SAMR security and during the upgrade SP1 ... > updates that SP1 will be over written and thus the workstation will not have ... >> provide domain account credentials to join the computer account to the ...
    (microsoft.public.windows.group_policy)
  • Re: Loopback issues
    ... policy to be interrupted by changes in ACLing (something I ... Microsoft MVP (Windows Security) ... > I finally got this to work on a Windows 2000 workstation and a different ... >> none of the User Configuraiton portion of the policy is being applied. ...
    (microsoft.public.windows.group_policy)
  • Re: Local Security Policy Locked (or something?)
    ... at one time I may have been booting the server ending up ... for the local workstation. ... Failed to open IPsec policy storage Access is ... or not a given security setting is defined in group policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Workstation can see out, but cannot see in!
    ... Local Security Policy Locked ... at one time I may have been booting the server ending up ... for the local workstation. ...
    (microsoft.public.windowsxp.security_admin)
  • Fwd: Oh Dear, Where to start?!
    ... It seems to me you need two things: an organizational policy, ... finish college and break into the real world of computer security. ... experience in the field of network security and policy ... updates, driver updates, and recommended updates. ...
    (Security-Basics)