Link to home
Start Free TrialLog in
Avatar of Westez
Westez

asked on

System Event log warning - What up with this msg?

I've just had these msg's start appearing in my system event logs. Would someone clue me as to what may be the cause?

Event Type:      Warning
Event Source:      LSASRV
Event Category:      SPNEGO (Negotiator)
Event ID:      40960
Date:            10/8/2008
Time:            9:58:32 AM
User:            N/A
Computer:      servername
Description:
The Security System detected an authentication error for the server LDAP/servername.domain.org/domain.org@domain.ORG.  The failure code from authentication protocol Kerberos was "The specified user does not exist.
 (0xc0000064)".

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 64 00 00 c0               d..À    
ASKER CERTIFIED SOLUTION
Avatar of sk_raja_raja
sk_raja_raja

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Brian Pierce
It would seem to be a logon attempt from an account that does not exist. Is there a scheduled task or service set to run under an account which has been deleted ?
Avatar of Westez
Westez

ASKER

All  - I found a hint in the second link sk raja raja sent about Stored User Names and Passwords.  I added a user account and this eliminated the event id 40960.