• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 330
  • Last Modified:

System Event log warning - What up with this msg?

I've just had these msg's start appearing in my system event logs. Would someone clue me as to what may be the cause?

Event Type:      Warning
Event Source:      LSASRV
Event Category:      SPNEGO (Negotiator)
Event ID:      40960
Date:            10/8/2008
Time:            9:58:32 AM
User:            N/A
Computer:      servername
The Security System detected an authentication error for the server LDAP/servername.domain.org/domain.org@domain.ORG.  The failure code from authentication protocol Kerberos was "The specified user does not exist.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0000: 64 00 00 c0               d..À    
1 Solution
It would seem to be a logon attempt from an account that does not exist. Is there a scheduled task or service set to run under an account which has been deleted ?
WestezAuthor Commented:
All  - I found a hint in the second link sk raja raja sent about Stored User Names and Passwords.  I added a user account and this eliminated the event id 40960.  
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now