Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Security System detected an attempted downgrade attack - Account keeps getting locked out

Posted on 2006-07-11
3
Medium Priority
?
9,865 Views
Last Modified: 2013-12-04
This user keeps getting locked out and I do not understand why. She has a black berry too. It gets locked out every couple of mins or so.


????


the event viewers are below. XP Pro w. xp2 and outlook 2003. exchage 2003
Event Type:      Warning
Event Source:      LSASRV
Event Category:      SPNEGO (Negotiator)
Event ID:      40960
Date:            7/11/2006
Time:            9:06:15 AM
User:            N/A
Computer:      ACM-XP003
Description:
The Security System detected an attempted downgrade attack for server exchangeMDB/mail.xxx.com.  The failure code from authentication protocol Kerberos was "The user account has been automatically locked because too many invalid logon attempts or password change attempts have been requested.
 (0xc0000234)".

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

----------------------------------------------------------------------------------------------------------------------------==
Event Type:      Warning
Event Source:      LSASRV
Event Category:      SPNEGO (Negotiator)
Event ID:      40961
Date:            7/11/2006
Time:            9:06:15 AM
User:            N/A
Computer:      ACM-XP003
Description:
The Security System could not establish a secured connection with the server exchangeMDB/mail.xxx.com.  No authentication protocol was available.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
Comment
Question by:ctechsol
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 

Author Comment

by:ctechsol
ID: 17081733
user was logged on to two different computers at the same time. it happens after a user has changed the password but has not logged off from previous computers using the old password.
0
 
LVL 5

Accepted Solution

by:
Netminder earned 0 total points
ID: 17118360
Closed, 500 points refunded.
Netminder
Site Admin
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Article by: btan
The intent is not to repeat what many has know about Ransomware but more to join its dots of what is it, who are the victims, why it exists, when and how we respond on infection. Lastly, sum up in a glance to share such information with more to help…
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question