• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 29313
  • Last Modified:

Fatal Alert Event ID 36888

Hi,
  I am getting  "The following fatal alert was generated: 10. The internal error state is 1203" error on SBS2011. Is this something I need to address or I can ignore?

Thanks.

Log Name:      System
Source:        Schannel
Date:          4/18/2014 11:59:25 AM
Event ID:      36888
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      DC1.DomainName.local
Description:
The following fatal alert was generated: 10. The internal error state is 1203.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
    <EventID>36888</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-18T15:59:25.450354300Z" />
    <EventRecordID>466454</EventRecordID>
    <Correlation />
    <Execution ProcessID="560" ThreadID="1400" />
    <Channel>System</Channel>
    <Computer>DC1.DomainName.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="AlertDesc">10</Data>
    <Data Name="ErrorState">1203</Data>
  </EventData>
</Event>
0
sglee
Asked:
sglee
4 Solutions
 
Sam SawalhiIT ConsultantCommented:
Hi,

This event is expected as the client is trying to use the wrong port or the wrong protocol to access the site

So if a user tries to reach owa using http in stead of https, you would get this event (Unless you have configure forwarding from http to https on the server).
0
 
sgleeAuthor Commented:
"if a user tries to reach owa using http in stead of https" --->
All users on the network connects to Terminal Server (W2008) using Remote Desktop Connection and run Office Apps (Word/Excel/Outlook).
There are some users that directly opens files from their desktop computer from mapped drives (off SBS2011) because some apps could not be installed on the Terminal Server environment.
Outside users connect to the Terminal Server as well using Remote Desktop.
No user knows how to connect to RWW and most computers on the network has Windows 7 or 8 HOME version, so can't accept connections.
Having said that, if I assume that no internal user tried http instead of https for OWA, could it be some hackers trying to poke around my SBS2011 network?
0
 
Seth SimmonsSr. Systems AdministratorCommented:
someone asked the same question a couple months ago

The following fatal alert was generated: 10. The internal error state is 10
www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/Windows_7/Q_28360489.html
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
Sam SawalhiIT ConsultantCommented:
have you installed anything new on the server? like an antivirus program?

also are you running sharePoint on that server?

Please advise
Thank you
0
 
sgleeAuthor Commented:
have you installed anything new on the server? like an antivirus program? ---> everything was fine until I installed Symantec EndPoint Protection 12.1. Users could not connect to the server/SBS2011 via mapped Drives ... etc.
So I completely uninstalled EndPoint protection from SBS2011 now.

also are you running sharePoint on that server? ---> it is a default SBS2011 install. I don't know what sharepoint is or does.
0
 
Sam SawalhiIT ConsultantCommented:
i noticed this thread with the same symptoms you are describing please check it out...

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_27536580.html
0
 
sgleeAuthor Commented:
@wsawalhi
I followed up on the link above and ran the command in SharePoint Mgmt Shell, but it DID NOT return True. Actually nothing was returned.

(get-spserver $env:computername).NeedsUpgrade
0
 
Sam SawalhiIT ConsultantCommented:
how often is this error message showing in the event viewer?
0
 
sgleeAuthor Commented:
Since March 2014, it happened twice, both today at 11:59:15 AM and 11:59:25AM.
0
 
Olaf De CeusterCommented:
You could run the SBS 2011 BPA for possible answer:
http://support.microsoft.com/kb/2673284/en-US
Hope that helps,
Olaf
0
 
sgleeAuthor Commented:
Thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now