Westez
asked on
System Event log warning - What up with this msg?
I've just had these msg's start appearing in my system event logs. Would someone clue me as to what may be the cause?
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 10/8/2008
Time: 9:58:32 AM
User: N/A
Computer: servername
Description:
The Security System detected an authentication error for the server LDAP/servername.domain.org /domain.or g@domain.O RG. The failure code from authentication protocol Kerberos was "The specified user does not exist.
(0xc0000064)".
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 64 00 00 c0 d..À
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 10/8/2008
Time: 9:58:32 AM
User: N/A
Computer: servername
Description:
The Security System detected an authentication error for the server LDAP/servername.domain.org
(0xc0000064)".
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 64 00 00 c0 d..À
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
It would seem to be a logon attempt from an account that does not exist. Is there a scheduled task or service set to run under an account which has been deleted ?
ASKER
All - I found a hint in the second link sk raja raja sent about Stored User Names and Passwords. I added a user account and this eliminated the event id 40960.