LsaSrv 40961 No authentication protocol was available. Vist to SBS 2003 sp2 For GPO error

  • Thread starter Thread starter jsoup
  • Start date Start date
J

jsoup

GPO error out because LSASRV on Corispoding error on server?
How should I tourbleshoot this problem???
Thank in advance


- System

- Provider

[ Name] LsaSrv

- EventID 40961

[ Qualifiers] 32768

Level 3

Task 3

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2007-11-14T04:23:50.000Z

EventRecordID 33637

Channel System

Computer xxx.xxxxx.xxx

Security


- EventData

ldap/Ser3.Fool1.net/[email protected] > I change the Name only
03030980


--------------------------------------------------------------------------------

Binary data:


In Words

0000: 80090303


In Bytes

0000: 03 03 09 80 ...?



This is seen for the the processing of Group Policy failed. Windows
attempted to retrieve new Group Policy settings for this user or
computer. Look in the details tab for error code and description.
Windows will automatically retry this operation at the next refresh
cycle. Computers joined to the domain must have proper name resolution
and network connectivity to a domain controller for discovery of new
Group Policy objects and settings. An event will be logged when Group
Policy is successful.

- System

- Provider

[ Name] Microsoft-Windows-GroupPolicy
[ Guid] {aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}

EventID 1030

Version 0

Level 2

Task 0

Opcode 1

Keywords 0x8000000000000000

- TimeCreated

[ SystemTime] 2007-11-14T04:23:50.101Z

EventRecordID 33638

- Correlation

[ ActivityID] {66853CD0-F427-4E36-860B-6DF433A859C9}

- Execution

[ ProcessID] 1328
[ ThreadID] 2888

Channel System

Computer cXX.XXXXX.xxx

- Security

[ UserID] S-1-5-21-421679313-4007569711-4034554478-1136


- EventData

SupportInfo1 1
SupportInfo2 1986
ProcessingMode 0
ProcessingTimeInMilliseconds 4477
ErrorCode 1326
ErrorDescription Logon failure: unknown user name or bad password.
DCName \\XX.XXXXX.xxx
 
Is the SBS server the only DNS server the Vista client is pointing to? Are
reverse zones enabled on the SBS DNS server?
 
Is the SBS server the only DNS server the Vista client is pointing to? Are
reverse zones enabled on the SBS DNS serve
Click to expand...

I know this problem is hard to troubleshoot. I have spent months with
it.
IT is a vista only problem. No corresponding entry in the other XP
workstation.
There are no corresponding time entries on the server ether. Thus I
think the problem is on the Vista system.
The SBS has 5 users on it. Vista GPO issues
The Time Sync is working.
The timing of the event shows "LsaSrv" is the Negotiate Security
Package. it is a specialized Security Support Provider (SSP) that
acts as an application layer between the Security Support Provider
Interface (SSPI) and the other SSPs. When an application calls into
SSPI to log a security principal onto a network, it can specify an SSP
to process that request.
Error 11/16/2007 5:37:46 AM Microsoft-Windows-GroupPolic
Warning 11/16/2007 5:37:46 AM LsaSrv
Warning 11/16/2007 5:37:43 AM LsaSrv

I have tried all the hot fix and read all GPO and vista issues.
Without a corresponding time entries on the server I have to assume it
never got there.
I show no corresponding time entry being stopped By the ISA.
I don't think window live onecare is blocking this. I could be wrong.
I just don't have knowledge to go further.

Please don't dump this call because it HARD to troubleshoot.

This is the sequence of the events log (sample) from vista

Error 11/16/2007 5:37:46 AM Microsoft-Windows-GroupPolicy 1030
None The processing of Group Policy failed. Windows attempted to
retrieve new Group Policy settings for this user or computer. Look in
the details tab for error code and description. Windows will
automatically retry this operation at the next refresh cycle.
Computers joined to the domain must have proper name resolution and
network connectivity to a domain controller for discovery of new Group
Policy objects and settings. An event will be logged when Group Policy
is successful.
Warning 11/16/2007 5:37:46 AM LsaSrv 40961 (3) The Security
System could not establish a secured connection with the server
ldap/sc4p.Compass4.net/[email protected]. No authentication
protocol was available.
Warning 11/16/2007 5:37:43 AM LsaSrv 40961 (3) The Security
System could not establish a secured connection with the server
LDAP/sc4p.Compass4.net/[email protected]. No authentication
protocol was available.
Information 11/16/2007 5:12:37 AM Service Control Manager 7036
None The WinHTTP Web Proxy Auto-Discovery Service service entered
the stopped state.
Information 11/16/2007 4:56:07 AM Service Control Manager 7036
None The WinHTTP Web Proxy Auto-Discovery Service service entered
the running state.
Information 11/16/2007 4:13:48 AM Service Control Manager 7036
None The WinHTTP Web Proxy Auto-Discovery Service service entered
the stopped state.
Information 11/16/2007 3:57:18 AM Service Control Manager 7036
None The WinHTTP Web Proxy Auto-Discovery Service service entered
the running state.
Error 11/16/2007 3:51:41 AM Microsoft-Windows-GroupPolicy 1030
None The processing of Group Policy failed. Windows attempted to
retrieve new Group Policy settings for this user or computer. Look in
the details tab for error code and description. Windows will
automatically retry this operation at the next refresh cycle.
Computers joined to the domain must have proper name resolution and
network connectivity to a domain controller for discovery of new Group
Policy objects and settings. An event will be logged when Group Policy
is successful.
Warning 11/16/2007 3:51:41 AM LsaSrv 40961 (3) The Security
System could not establish a secured connection with the server
ldap/sc4p.Compass4.net/[email protected]. No authentication
protocol was available.
Warning 11/16/2007 3:51:39 AM LsaSrv 40961 (3) The Security
System could not establish a secured connection with the server
LDAP/sc4p.Compass4.net/[email protected]. No authentication
protocol was available.
Information 11/16/2007 3:21:18 AM Service Control Manager 7036
None The WinHTTP Web Proxy Auto-Discovery Service service entered
the stopped state.
 
Please post the results of ipconfig /all from both the SBS server and an
affected Vista client.

Note that I will not be able to respond until Monday as I am away for the
weekend. If you pos the requested information someone else may be able to
help.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


in message
 
Please post the results of ipconfig /all from both the SBS server and an
affected Vista client.

Note that I will not be able to respond until Monday as I am away for the
weekend. If you pos the requested information someone else may be able to
help.
Click to expand...

VISTA Windows IP Configuration

Host Name . . . . . . . . . . . . : c4xp
Primary Dns Suffix . . . . . . . : Compass4.net
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : Compass4.net

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : Compass4.net
Description . . . . . . . . . . . : NVIDIA nForce Networking
Controller
Physical Address. . . . . . . . . : 00-1A-92-7B-E6-2B
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . :
fe80::ac82:43e8:28d2:a1da%7(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.32.15(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Wednesday, November 14, 2007
9:23:50 PM
Lease Expires . . . . . . . . . . : Thursday, November 22, 2007
9:23:47 PM
Default Gateway . . . . . . . . . : 192.168.32.2
DHCP Server . . . . . . . . . . . : 192.168.32.2
DHCPv6 IAID . . . . . . . . . . . : 184556178
DNS Servers . . . . . . . . . . . : 192.168.32.2
Primary WINS Server . . . . . . . : 192.168.32.2
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection*:

Connection-specific DNS Suffix . : Compass4.net
Description . . . . . . . . . . . : isatap.Compass4.net
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . :
fe80::5efe:192.168.32.15%11(Preferred)
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.32.2
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Local Area Connection* 10:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling
Pseudo-Interface
Physical Address. . . . . . . . . : 02-00-54-55-4E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

SBS 2003 SP2 Windows IP Configuration

Host Name . . . . . . . . . . . . : sc4p
Primary Dns Suffix . . . . . . . : Compass4.net
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : Compass4.net

Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme 5751 Gigabit
Controller
Physical Address. . . . . . . . . : 00-13-20-01-DD-AA
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.32.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.32.2
Primary WINS Server . . . . . . . : 192.168.32.2

Ethernet adapter Internet Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Linksys NC100 Fast Ethernet
Adapter
Physical Address. . . . . . . . . : 00-12-17-53-AD-3A
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.20
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.32.2
Primary WINS Server . . . . . . . : 192.168.32.2
NetBIOS over Tcpip. . . . . . . . : Disabled
 
Vista ISA client software
Click to expand...
Install SP3 on ISA
Install Vista Client ISA firewall

No change, problem still present.

Suggestion on how to isolate the workstation as the issue?
 
First make sure you have the latest Broadcom driver for the server NIC. Make
sure the Vista client also has the latest NIC driver.

Create a new OU that has all group policies disabled. Move the computer and
a user to this OU. Start enabling policies one at a time until you find the
culprit.

gpresult is good tool to use during this testing.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


in message
 
First make sure you have the latest Broadcom driver for the server NIC. Make
sure the Vista client also has the latest NIC driver.

Create a new OU that has all group policies disabled. Move the computer and
a user to this OU. Start enabling policies one at a time until you find the
culprit.

gpresult is good tool to use during this testing.
Click to expand...


The is ON a SBS2003 sp2 prem. all XP system NO problem just Vista
 
So isolate the Vista computer and find out what is causing this. I manage
several SBS servers a couple of which have some Vista Business and Ultimate
clients. I'm not seeing this error on either network. Something that is
running or a group policy is doing something Vista doesn't like. You'll have
to do some troubleshooting to find out what.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


in message
 
Back
Top