Solved

LsaSrv SPNEGO 40961 error leading to system freeze under XP Pro SP2

Posted on 2007-04-10
9
6,557 Views
Last Modified: 2013-11-17
I have a Dell Inspiron E1505 system w/ dual core intel processor.  1 GB memory, 80 GB HD.  Radeon x1300 video card.  Running XP Pro SP2 with all security patches up to date.  

I had a hard drive fail last week and Dell replaced it.  After reinstallation of all oftware, with the only new program being Microsoft OneCare for virus, spyware, etc (My TrendMicdo subscription just expired), I have had several lockups of the system.  The screen freezes, no blue screen, no error messages.  Just a total lock up.  Nothing consistent about what program I am using or anything between the different lockups.  

After talking to Dell, we found several entries in the system event viewer around the times of the lockups.  It referred to the source as being LsaSrv and event being 40961 with a category SPNEGO.  

I have googled this problem, searched the MS support database and checked here and have found similar errors, but not a similar result (freeze of the system).  

As I noted, the only different program that I have installed is OneCare Live, but I found no other users having a similar problem.  Any suggestions on solutions?
0
Comment
Question by:erinch
  • 5
  • 4
9 Comments
 
LVL 38

Expert Comment

by:younghv
ID: 18886348
erinch,
We fight this one all the time - 'authentication' 40961 and lsasvr.
Vic

From 'My Computer' Properties, drop the computer down into a Workgroup (DO NOT RE-BOOT).
Immediately go back in and re-add the computer to the Domain.

Reboot.

Stop and re-start the w32time service - and make sure it synchronizes time with the DC.

We have written a batch command at work with the steps below imbedded.
It seems to work for us.

To configure a client computer for automatic domain time synchronization

 1.  Open a Command Prompt.

2.  Type the following command and then press ENTER:

w32tm /config /syncfromflags:domhier /update

3.  Type the following command and then press ENTER:

net stop w32time

4.  Type the following command and then press ENTER:

net start w32time

Check the local workstation Event Viewer for Event ID 40961 or 9 - or anything else that relates to 'authentication errors'.
Make sure the boxes are not going into any kind of 'sleep' or hibernation mode.
Shutting down the monitor is fine, I never advise any automatic action with the CPU.

Any Terminal Services functions/connections?
When users logged into a terminal server and terminal sessions were disconnected (but not terminated).
Improperly terminating those connections will create the same symptoms.
0
 
LVL 1

Author Comment

by:erinch
ID: 18887180
So, this error can occur even when the system isn't logged into any network?  I have had it happen when connected to my wifi at home and then connected to the wired office network.

Just confirming before going through the steps
0
 
LVL 38

Accepted Solution

by:
younghv earned 500 total points
ID: 18888431
erinch,
The use of OneCare Live bothers me also. I tried it for a few days last year, but had a lot of 'glitchy' type problems with it. Nothing big, but just seemed to be interfering with the OS.

The 'sleep or hibernate' mode created a lot of problems for use and we disabled it on all computers on our domain.

Compare the times in your Event Viewer logs for this event. Are you getting them while at home or just when you are wired at work?

Vic
0
 
LVL 1

Author Comment

by:erinch
ID: 18889789
The problems are happening both at home and at work.  I am going to try the first possible solution and also uninstall onecare and go with what I know works.  

0
Save on storage to protect fatherhood memories

You're the dad who has everything. This Father's Day, make sure your family memories are protected. My Passport Ultra has automatic backup and password protection to keep your cherished photos and videos safe. With up to 3TB, you have plenty of room to hold the adventures ahead.

 
LVL 38

Expert Comment

by:younghv
ID: 18890955
OK - if you are going to drop it to workgroup and re-add --- MAKE SURE you are at work and hard wired to the domain.

Vic
0
 
LVL 1

Author Comment

by:erinch
ID: 18903069
So far since uninstalling OneCare Live (I have not attempted the other steps), I have had no lockups in nearly 2 days
0
 
LVL 38

Expert Comment

by:younghv
ID: 18904855
erinch,
Amazing isn't it (One Care)?
Their own product and it interferes with their own OS.
I had it on my personal notebook last year and thought it might just be because of all the misc junk I have installed there.

BTW - were you running any other 3rd-Party Security programs at the same time as One Care?

Vic
0
 
LVL 1

Author Comment

by:erinch
ID: 18923987
I was waiting to report until I had several more days of crash-free living.  So far so good still.  

Apparently, Vic, as you noted, OneCare messes up MS' own OS.  Quality work.  

No, I wasn't running any other security programs at the time.  

Anyway, I think we can call this closed.  Thanks for your help.  
0
 
LVL 38

Expert Comment

by:younghv
ID: 18924117
Thank you.

When you get a chance, take a look at some of the pending questions and share your knowledge.
We're always looking for more folks to contribute.

Vic
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Power and BTU ratings calculation 8 24
Advice on suitable tablet device. 13 86
factory reset 9 62
lenovo docking station serial number 6 54
Every server (virtual or physical) needs a console: and the console can be provided through hardware directly connected, software for remote connections, local connections, through a KVM, etc. This document explains the different types of consol…
Does your iMac really need a hardware upgrade? Will upgrading RAM speed-up your computer? If yes, then how can you proceed? Upgrading RAM in your iMac is not as simple as it may seem. This article will help you in getting and installing right RA…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now