Event ID: 40960 SPNEGO (Negotiator) authentication error

[Mauricio Reyes]

Hi!
I have upgraded one of my domaincontrollers from Windows 2000 to Windows
2003.
I have still got one domaincontroller that is windows 2000.
The 2003 DC have the FSMO roles, both DC's has the global catalog and
running DNS server .
After the upgrade I frequently get error loggings on 3 of my Windows 2003
memberservers.
I get Lsasrv Event ID 40960 and 40961 in the systemlogs one to two times a
day.
I tried to restart one of the memberservers and then the logging stopped for
a week.
I have installed one new server after the upgrade of the domain, on that
server I don't get any
errors. I don't have any lsasrv errors on my windows 2000 memberservers or
the domaincontrollers. I been reading the suggestions on Event id net
regarding this error, but no luck when it comes to solving the problem.
I have tried to find the error with netdiag. but every test gets passed.

Has anyone a solution to this problem?

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 2006-04-05
Time: 05:59:15
User: N/A
Computer: vidstige
Description:
The Security System detected an authentication error for the server
cifs/donald.test.nu. The failure code from authentication protocol Kerberos
was "The attempted logon is invalid. This is either due to a bad username or
authentication information.
(0xc000006d)".

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 00 c0

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 2006-04-05
Time: 05:59:15
User: N/A
Computer: vidstige
Description:
The Security System could not establish a secured connection with the server
cifs/donald.test.nu. No authentication protocol was available.

[Steven L Umbach]

Are you experiencing any problems with users being able to access resources
or other problems? IMHO if not I would not worry about it as an error one or
two times a day as most likely nothing to worry about if everything works
fine and you have already done your homework with netdiag and checking
EventID.net. The link below is to a Google search on that Event ID where
you may find some more info. --- Steve

http://www.google.com/search?hl=en&lr=&q=event+id+40960+SPNEGO&btnG=Search

"Mauricio Reyes" <maor...@hotmail.com> wrote in message
news:eF5ubOhW...@TK2MSFTNGP02.phx.gbl...