LSASRV 40968 2008 r2, exchange 2010 sp1

Posted on 2011-03-08
Medium Priority
Last Modified: 2012-05-11
2008 r2, exchange 2010 sp1, not a domain controller.

Over the last 2 days I started to receive the below alert.  I ran microsoft malicious removal tool and it came up clean.  Does anyone have any idea how to figure this out?

Log Name:      System
Source:        LsaSrv
Date:          3/8/2011 11:03:14 AM
Event ID:      40968
Task Category: None
Level:         Warning
User:          SYSTEM
Computer:      MYCIOMPUTER
The Security System has received an authentication request that could not be decoded. The request has failed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <Provider Name="LsaSrv" Guid="{199FE037-2B82-40A9-82AC-E1D46C792B99}" />
    <TimeCreated SystemTime="2011-03-08T19:03:14.470834200Z" />
    <Correlation />
    <Execution ProcessID="472" ThreadID="576" />
    <Security UserID="S-1-5-18" />
Question by:BBQSTEAK
1 Comment

Accepted Solution

praveenkumare_sp earned 2000 total points
ID: 35077527
Some one has tried to authenticate themselves to this Server , the server has not accepted the person

this explains the above event

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

This article describes Top 9 Exchange troubleshooting utilities that every Exchange Administrator should know. Most of the utilities are available free of cost. List of tools that I am going to explain in this article are:   Microsoft Remote Con…
In my humble opinion (IMHO), TouchDown from Symantec is the best in class for this type of application, but Symantec has end-of-lifed it and although one can keep using it, it will no longer be supported or upgraded.  Time to look for alternatives t…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
In this video I will demonstrate how to set up Nine, which I now consider the best alternative email app to Touchdown.
Suggested Courses

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question