Solved

Fatal Alert Event ID 36888

Posted on 2014-04-18
11
17,504 Views
Last Modified: 2014-04-24
Hi,
  I am getting  "The following fatal alert was generated: 10. The internal error state is 1203" error on SBS2011. Is this something I need to address or I can ignore?

Thanks.

Log Name:      System
Source:        Schannel
Date:          4/18/2014 11:59:25 AM
Event ID:      36888
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      DC1.DomainName.local
Description:
The following fatal alert was generated: 10. The internal error state is 1203.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
    <EventID>36888</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-18T15:59:25.450354300Z" />
    <EventRecordID>466454</EventRecordID>
    <Correlation />
    <Execution ProcessID="560" ThreadID="1400" />
    <Channel>System</Channel>
    <Computer>DC1.DomainName.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="AlertDesc">10</Data>
    <Data Name="ErrorState">1203</Data>
  </EventData>
</Event>
0
Comment
Question by:sglee
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
11 Comments
 
LVL 4

Accepted Solution

by:
wsawalhi earned 153 total points
ID: 40009101
Hi,

This event is expected as the client is trying to use the wrong port or the wrong protocol to access the site

So if a user tries to reach owa using http in stead of https, you would get this event (Unless you have configure forwarding from http to https on the server).
0
 

Author Comment

by:sglee
ID: 40009125
"if a user tries to reach owa using http in stead of https" --->
All users on the network connects to Terminal Server (W2008) using Remote Desktop Connection and run Office Apps (Word/Excel/Outlook).
There are some users that directly opens files from their desktop computer from mapped drives (off SBS2011) because some apps could not be installed on the Terminal Server environment.
Outside users connect to the Terminal Server as well using Remote Desktop.
No user knows how to connect to RWW and most computers on the network has Windows 7 or 8 HOME version, so can't accept connections.
Having said that, if I assume that no internal user tried http instead of https for OWA, could it be some hackers trying to poke around my SBS2011 network?
0
 
LVL 35

Assisted Solution

by:Seth Simmons
Seth Simmons earned 76 total points
ID: 40009141
someone asked the same question a couple months ago

The following fatal alert was generated: 10. The internal error state is 10
www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/Windows_7/Q_28360489.html
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 
LVL 4

Expert Comment

by:wsawalhi
ID: 40009148
have you installed anything new on the server? like an antivirus program?

also are you running sharePoint on that server?

Please advise
Thank you
0
 

Author Comment

by:sglee
ID: 40009167
have you installed anything new on the server? like an antivirus program? ---> everything was fine until I installed Symantec EndPoint Protection 12.1. Users could not connect to the server/SBS2011 via mapped Drives ... etc.
So I completely uninstalled EndPoint protection from SBS2011 now.

also are you running sharePoint on that server? ---> it is a default SBS2011 install. I don't know what sharepoint is or does.
0
 
LVL 4

Assisted Solution

by:wsawalhi
wsawalhi earned 153 total points
ID: 40009210
i noticed this thread with the same symptoms you are describing please check it out...

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_27536580.html
0
 

Author Comment

by:sglee
ID: 40009232
@wsawalhi
I followed up on the link above and ran the command in SharePoint Mgmt Shell, but it DID NOT return True. Actually nothing was returned.

(get-spserver $env:computername).NeedsUpgrade
0
 
LVL 4

Expert Comment

by:wsawalhi
ID: 40009257
how often is this error message showing in the event viewer?
0
 

Author Comment

by:sglee
ID: 40009276
Since March 2014, it happened twice, both today at 11:59:15 AM and 11:59:25AM.
0
 
LVL 22

Assisted Solution

by:Olaf De Ceuster
Olaf De Ceuster earned 76 total points
ID: 40013249
You could run the SBS 2011 BPA for possible answer:
http://support.microsoft.com/kb/2673284/en-US
Hope that helps,
Olaf
0
 

Author Comment

by:sglee
ID: 40021795
Thanks.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question