events 40960,40961
- From: "kcsteele" <k.c.steele@xxxxxxxxx>
- Date: 11 Sep 2006 05:54:09 -0700
Win2k3 DC, I've been getting warnings with id 40960, happens 3 or 4
times a day. Used to be 40960 and 40961 but the 40961s stopped after
going to SP1.
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 9/8/2006
Time: 5:26:07 PM
User: N/A
Computer: DC01
Description:
The Security System detected an authentication error for the server
cifs/DC02.domain.com. The failure code from authentication protocol
Kerberos was "{Operation Failed}
The requested operation was unsuccessful.
(0xc0000001)".
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 9/8/2006
Time: 5:25:15 PM
User: N/A
Computer: DC01
Description:
The Security System detected an authentication error for the server
cifs/DC02. The failure code from authentication protocol Kerberos was
"{Operation Failed}
The requested operation was unsuccessful.
(0xc0000001)".
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 9/8/2006
Time: 5:25:11 PM
User: N/A
Computer: DC01
Description:
The Security System detected an authentication error for the server
cifs/dc02. The failure code from authentication protocol Kerberos was
"{Operation Failed}
The requested operation was unsuccessful.
(0xc0000001)".
The above events relate to another DC. However I get similar events for
a couple member servers as well. There are other member servers which
do not generate these warnings too; for some reason, these events only
appear in reference to 2 member servers and the other DC (the ones
which I pasted).
There isn't much similar between the machines which are generating the
errors. One of the member servers is running SMS and acts as a print
server, the other member server runs IIS (intranet only) and that's it.
The DC is running DNS/DHCP.
I've looked all over and tried many different things, one of which was
to grant the Network Service account full control over
HKLM\System\CurrentControlSet\Services\Dhcp and Tcpip. But I think that
was just for someone needing to be able to start the DHCP service.
(here is where I got the potential solution from:
http://groups.google.com/group/microsoft.public.windows.server.migration/browse_thread/thread/f509f7a857cc050b/5ea03bb911cee29d%235ea03bb911cee29d
)
I've tried other things mentioned in that reply, but with no luck. I am
thinking maybe it has something to do with SPNs?
Any help would be greatly appreciated!
.
- Follow-Ups:
- Re: events 40960,40961
- From: kcsteele
- Re: events 40960,40961
- Prev by Date: Re: Blue Screen at Boot.
- Next by Date: Re: Blue Screen at Boot.
- Previous by thread: Re: Blue Screen at Boot.
- Next by thread: Re: events 40960,40961
- Index(es):
Relevant Pages
|