Re: Event Warning 40961 LSASRV


Indeed both servers are multihomed... The primary DNS server having 4 IP
addresses (DNS listening on one), but others used for SQL, mail etc... The
secondary DNS server has 10 IP addresses, one for DNS listening and others
for Web services etc. Both servers have only one physical NIC each. Their
statically configured HOST A entries for machine name are as the DNS
listening addresses.

Since they're not DC's I've left NetLogon Service A registrations alone as
they shouldn't exist or be relevant, and I've only added the following
registry key to disable dynamic DNS updates

HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
DWORD DisableDynamicUpdate
Value 1

I've not seen the LSASRV warnings for over an hour now, so this would now
seem to be resolved. Thanks very much for your help in this!

As a footnote, would you anticipate any unwanted side effects due to me
disabling these dynamic DNS updates?

The Vogon :)



"Todd J Heron" wrote:

> Is the server multihomed? If so you must disable dynamic registration of
> the extra NIC via registry modifications.
>
> How to enable or disable DNS updates in Windows 2000 and in Windows Server
> 2003
> http://support.microsoft.com/default.aspx?scid=kb;en-us;246804
>
> --
> Todd J Heron, MCSE
> Windows Server 2003/2000/NT; CCA
> ----------------------------------------------------------------------------
> This posting is provided "as is" with no warranties and confers no rights
>
>
> "The Vogon" <TheVogon@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:0A6FD650-0F6D-4939-BB1D-D94F8AC2E266@xxxxxxxxxxxxxxxx
>
> OK, thanks, that makes sense... unfortuantely however I'm still getting
> event warnings as follows:
> ----------------------------------------------------------------------------------
> Event Type: Warning
> Event Source: LSASRV
> Event Category: SPNEGO (Negotiator)
> Event ID: 40960
> Date: 29.10.2005
> Time: 23:12:48
> User: N/A
> Computer: DNS1
> Description:
> The Security System detected an authentication error for the server
> DNS/ns.provider.net. The failure code from authentication protocol Kerberos
> was "There are currently no logon servers available to service the logon
> request.
> (0xc000005e)".
> ----------------------------------------------------------------------------------
> Event Type: Warning
> Event Source: LSASRV
> Event Category: SPNEGO (Negotiator)
> Event ID: 40961
> Date: 29.10.2005
> Time: 23:12:48
> User: N/A
> Computer: DNS1
> Description:
> The Security System could not establish a secured connection with the server
> DNS/ns.provider.net. No authentication protocol was available.
> ----------------------------------------------------------------------------------
>
> Note that these event warnings are occuring together at a frequency of
> exactly one hour on both my primary and secondary DNS servers...
>
>
>
.

Relevant Pages

  • Re: Event Warning 40961 LSASRV
    ... Also, the netlogon service is not running on either server, yet I'm still ... getting warnings about authentication failure to the providers nameserver. ... Also, after making the registry entry previously stated, DNS services were ...
    (microsoft.public.windows.server.networking)
  • Issues migrating SBS 2003 domain to Server 2008 Standard
    ... We are stuck migrating our SBS 2003 domain to Server 2008. ... Fatal Error:DsGetDcName (SRV-EXCH) call failed, ... Verify your Domain Name Sysytem (DNS) is ... network connectivity to a domain controller. ...
    (microsoft.public.windows.server.sbs)
  • Re: Issues migrating SBS 2003 domain to Server 2008 Standard
    ... Since you have migrated to standard server 2008 you would be better served posting in a Standard server NG. ... Event String: ... Verify your Domain Name Sysytem (DNS) is ... network connectivity to a domain controller. ...
    (microsoft.public.windows.server.sbs)
  • Re: Issues migrating SBS 2003 domain to Server 2008 Standard
    ... One thought, when you introduced the Windows Server 2008 and before making them DC's, did you extend the schema on the SBS 2003 server? ... Event String: ... Verify your Domain Name Sysytem (DNS) is ... network connectivity to a domain controller. ...
    (microsoft.public.windows.server.sbs)
  • Re: RPC is unavailable when try to transfer FSMO Roles
    ... on the DNS server ... Registry value: DnsAvoidRegisterRecords ... To stop registration of both NICs, add or alter this ...
    (microsoft.public.windows.server.active_directory)