Solved

System Event log warning - What up with this msg?

Posted on 2008-10-08
3
265 Views
Last Modified: 2013-12-04
I've just had these msg's start appearing in my system event logs. Would someone clue me as to what may be the cause?

Event Type:      Warning
Event Source:      LSASRV
Event Category:      SPNEGO (Negotiator)
Event ID:      40960
Date:            10/8/2008
Time:            9:58:32 AM
User:            N/A
Computer:      servername
Description:
The Security System detected an authentication error for the server LDAP/servername.domain.org/domain.org@domain.ORG.  The failure code from authentication protocol Kerberos was "The specified user does not exist.
 (0xc0000064)".

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 64 00 00 c0               d..À    
0
Comment
Question by:Westez
3 Comments
 
LVL 18

Accepted Solution

by:
sk_raja_raja earned 250 total points
Comment Utility
0
 
LVL 70

Expert Comment

by:KCTS
Comment Utility
It would seem to be a logon attempt from an account that does not exist. Is there a scheduled task or service set to run under an account which has been deleted ?
0
 

Author Comment

by:Westez
Comment Utility
All  - I found a hint in the second link sk raja raja sent about Stored User Names and Passwords.  I added a user account and this eliminated the event id 40960.  
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now