Solved

LSASRV 40968 2008 r2, exchange 2010 sp1

Posted on 2011-03-08
1
2,102 Views
Last Modified: 2012-05-11
2008 r2, exchange 2010 sp1, not a domain controller.

Over the last 2 days I started to receive the below alert.  I ran microsoft malicious removal tool and it came up clean.  Does anyone have any idea how to figure this out?


Log Name:      System
Source:        LsaSrv
Date:          3/8/2011 11:03:14 AM
Event ID:      40968
Task Category: None
Level:         Warning
Keywords:      
User:          SYSTEM
Computer:      MYCIOMPUTER
Description:
The Security System has received an authentication request that could not be decoded. The request has failed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="LsaSrv" Guid="{199FE037-2B82-40A9-82AC-E1D46C792B99}" />
    <EventID>40968</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2011-03-08T19:03:14.470834200Z" />
    <EventRecordID>11640</EventRecordID>
    <Correlation />
    <Execution ProcessID="472" ThreadID="576" />
    <Channel>System</Channel>
    <Computer>MyComputer</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
  </EventData>
</Event>
0
Comment
Question by:BBQSTEAK
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 8

Accepted Solution

by:
praveenkumare_sp earned 500 total points
ID: 35077527
Some one has tried to authenticate themselves to this Server , the server has not accepted the person

this explains the above event
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
how to add IIS SMTP to handle application/Scanner relays into office 365.

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question