Re: XP Wkst errors logging onto domain



Looked at a number of these things; we do not have time sync set yet (it's
on the list). It's just a simple 7 wkst & SBS 2003 server, should be
straightforward.

Lots of stuff pointed to DNS, so I deleted DNS entries and went thru the
wizard again, but did NOT select reverse entries 'cause the wizard said that
was for larger networks. A little later it appeared that some reverse
entries had been added.

thanks.

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:%235R0sQSGGHA.3984@xxxxxxxxxxxxxxxxxxxxxxx
> Any help here?
> http://www.eventid.net/display.asp?eventid=40961&eventno=1398&source=LsaSrv&phase=1
>
> --
> Merv Porter [SBS MVP]
> ===================================
> "R" <none@xxxxxxxx> wrote in message
> news:u%23K795HGGHA.3100@xxxxxxxxxxxxxxxxxxxxxxx
>>2 Days ago I configured RRAS for remote VPN access with Remote Desktop. It
>>worked.
>>
>> However, now the workstations (XP, SP2) take 20 minutes to login, receive
>> a message about being unable to access the network copy of their profile
>> and log the following in the event log:
>>
>> LSASRV
>> eventid: 40961
>>
>> The Security System could not establish a secured connection with the
>> server cifs/server.domain.local. No authentication protocol was
>> available.
>>
>> eventid: 40960
>> The Security System detected an attempted downgrade attack for server
>> cifs/server.domain.local. The failure code from authentication protocol
>> Kerberos was "There are currently no logon servers available to service
>> the logon request. (0xc000005e)".
>>
>> The workstations could ping the server by name & IP, but not connect.
>> Always some error about security or access denied. 2 Workstations that
>> had been logged in for 2 days continued to operate without problem.
>>
>> I did some DNS repairs as per suggestions found via google; then I
>> remembered setting up RRAS and shut down & disabled RRAS.
>>
>> The workstations then immediately had access and all was well.
>>
>> What could be going on?
>>
>>
>>
>
>


.



Relevant Pages

  • Re: Question - Can I force a machine to use a specific DC for Authentication Diag 1
    ... Connecting to directory service on server s2dc1. ... Latency information for 1 entries in the vector were ignored. ... DNS ...
    (microsoft.public.windows.server.general)
  • Re: Help with dcdiag /Test:dns
    ... The server is running Windows 2003 server and holds all 5 FMSO roles ... I can see the internal folder in DNS and it has the _msdcs, _sites, ... PASS - All the DNS entries for DC are registered on DNS server '192.168.1.10' and other DCs also have some of the names registered. ... Remote Access NDIS WAN Driver ...
    (microsoft.public.windows.server.dns)
  • Re: Two Servers, one AD in one Office
    ... The NetBT entries are completely harmless. ... Because you have no WINS server this also can be ignored. ... Best regards ... I just come back from my customer where I have installed DNS on the ...
    (microsoft.public.windows.server.active_directory)
  • Re: DNS Event Log Messages on DC
    ... with new additional eventlog entries everytime I ... The Security System detected an authentication error for the server ... Dynamic registration or deletion of one or more DNS records associated ... Source Domain controller: REMOTEDC1 ...
    (microsoft.public.windows.server.dns)
  • Issues migrating SBS 2003 domain to Server 2008 Standard
    ... We are stuck migrating our SBS 2003 domain to Server 2008. ... Fatal Error:DsGetDcName (SRV-EXCH) call failed, ... Verify your Domain Name Sysytem (DNS) is ... network connectivity to a domain controller. ...
    (microsoft.public.windows.server.sbs)

Loading