Windows 2003 Event ID: 40961

  • Thread starter Thread starter TM
  • Start date Start date
T

TM

I am running Windows 2003 Standard Edition with IIS, SQL, ADS, OP3/SMTP,
DNS, UDDI, WINS. I always got the following event in the Event Log (Security
Audit):

**************************
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 7/2/2003
Time: 4:28:44 PM
User: N/A
Computer: MyServer
Description:
The Security System could not establish a secured connection with the server
[email protected]. No authentication protocol was available.For more
information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
**************************

Thanks

Thomas
 
Is there a matching 40960 event?
If not, it probably is that Windows is looking for a reverse lookup zone.
If so, then it is more likely a forward lookup zone issue in DNS.

If you'd like more clarification let me know if there is a 40960 and I'll
post up a few action items that might help!

~Eric
 
Eric,

Thanks for your response. I had ripped the DNS and re-installed it. Since
then EV# 40961 had disappeared for good. I never received EV# 40960 to begin
with. However, EV# 673 (previous thread) still presented on the Security
Log. When I reinstalled DNS, instead of storing the Primary Zone in the AD,
I instructed the wizard to put it in the ascii text file as shown below.

*****************************
;
; Database file MyPrimaryZone.MyDomain.net.dns for
MyPrimaryZone.MyDomain.net zone.
; Zone version: 1
;

@ IN SOA MyServer.MyDomain.net.
hostmaster.MyDomain.net. (
1 ; serial number
900 ; refresh
600 ; retry
86400 ; expire
3600 ) ; default TTL

;
; Zone NS records
;

@ NS MyServer.MyDomain.net.

;
; Zone records
;

*****************************

Thomas

Eric Fleischman said:
Is there a matching 40960 event?
If not, it probably is that Windows is looking for a reverse lookup zone.
If so, then it is more likely a forward lookup zone issue in DNS.

If you'd like more clarification let me know if there is a 40960 and I'll
post up a few action items that might help!

~Eric

--
Eric Fleischman [MSFT]
Directory Services
This posting is provided "AS IS" with no warranties, and confers no rights.


TM said:
I am running Windows 2003 Standard Edition with IIS, SQL, ADS, OP3/SMTP,
DNS, UDDI, WINS. I always got the following event in the Event Log (Security
Audit):

**************************
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 7/2/2003
Time: 4:28:44 PM
User: N/A
Computer: MyServer
Description:
The Security System could not establish a secured connection with the server
[email protected]. No authentication protocol was available.For more
information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
**************************

Thanks

Thomas
Click to expand...
Click to expand...
 
Sorry for the delay. I lost track of this thread.
a 673 is usually because you have auditing turned up. 673 is logged when
users log on. More specifically, it is logged when a Kerberos ticket is
granted.

It is usually harmelss. I'd either turn down logging, or just ignore it.
If you turn down auditing it should go away.

~Eric


--
Eric Fleischman [MSFT]
Directory Services
This posting is provided "AS IS" with no warranties, and confers no rights.


TM said:
Eric,

Thanks for your response. I had ripped the DNS and re-installed it. Since
then EV# 40961 had disappeared for good. I never received EV# 40960 to begin
with. However, EV# 673 (previous thread) still presented on the Security
Log. When I reinstalled DNS, instead of storing the Primary Zone in the AD,
I instructed the wizard to put it in the ascii text file as shown below.

*****************************
;
; Database file MyPrimaryZone.MyDomain.net.dns for
MyPrimaryZone.MyDomain.net zone.
; Zone version: 1
;

@ IN SOA MyServer.MyDomain.net.
hostmaster.MyDomain.net. (
1 ; serial number
900 ; refresh
600 ; retry
86400 ; expire
3600 ) ; default TTL

;
; Zone NS records
;

@ NS MyServer.MyDomain.net.

;
; Zone records
;

*****************************

Thomas

Eric Fleischman said:
Is there a matching 40960 event?
If not, it probably is that Windows is looking for a reverse lookup zone.
If so, then it is more likely a forward lookup zone issue in DNS.

If you'd like more clarification let me know if there is a 40960 and I'll
post up a few action items that might help!

~Eric

--
Eric Fleischman [MSFT]
Directory Services
This posting is provided "AS IS" with no warranties, and confers no rights.


TM said:
I am running Windows 2003 Standard Edition with IIS, SQL, ADS, OP3/SMTP,
DNS, UDDI, WINS. I always got the following event in the Event Log (Security
Audit):

**************************
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 7/2/2003
Time: 4:28:44 PM
User: N/A
Computer: MyServer
Description:
The Security System could not establish a secured connection with the server
[email protected]. No authentication protocol was available.For more
information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
**************************

Thanks

Thomas
Click to expand...
Click to expand...
Click to expand...
 
Back
Top