Event ID 40960

Posted on 2011-05-05
Last Modified: 2012-05-11
I am getting Event ID 40960 on a 2003 Server running Exchange Server 2003.  The exact error is below.  I ran a w32tm /monitor (according to EE article 24620527)  and the offset in seconds between the FSMO and the other DC was 0.0007080 seconds. The event has only been logged twice in the last week or so.   The FSMO and the server in question have the same time on them, even the seconds are the same.

Event Type:      Warning
Event Source:   LSASRV
Event Category:            SPNEGO (Negotiator)
Event ID:          40960
Date:                5/4/2011
Time:                12:41:27 PM
User:                N/A
Computer:       COMPANY-MAIL
The Security System detected an authentication error for the server ldap/  The failure code from authentication protocol Kerberos was "The time at the Primary Domain Controller is different than the time at the Backup Domain Controller or member server by too large an amount.

For more information, see Help and Support Center at
0000: 33 01 00 c0               3..À    

 Any ideas?

Question by:cja-tech-guy
    1 Comment
    LVL 38

    Accepted Solution

    Just manually set your time.

    In a domain, there is a phase offset of 5 minutes. This means that if a computer on the network is more than +/- five minutes from the domain controller it will synch up. Since you recieve this error, it means that the computer is SO FAR out of synch that it can't synch up. So, if you manually set the time, it will be within synchronization tolerance.

    Also make sure all firewalls permit time synchronization. I think that's on port 123 UDP.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now