Hi All,
We are seeing Eventid 40961 generated every hour on Windows 2000 DCs that have
been upgraded to Server 2003 and every two hours on fresh Server 2003 DCs. The
contents look like the following:
>
>Event Type: Warning
>Event Source: LSASRV
>Event Category: SPNEGO (Negotiator)=20
>Event ID: 40961
>Date: 12/23/2003
>Time: 3:06:40 PM
>User: N/A
>Computer: NEDC1
>Description:
>The Security System could not establish a secured connection with the =
>server DNS/dns0.anl.gov. No authentication protocol was available.
Our Bind DNS server does not allow A record updating. We were able to circumvent this
problem under Windows 2000 with the following registery key:
HKLM\SYSTEM\CCS\Services\Netlogon\Parameters\RegisterDnsARecords = 0
Unfortunately, it appears to have no effect under Server 2003. Has anyone else seen
this error and, if so, have you found a way to get around it under Server 2003?
Thanks in advance for any info!
Mike Thommes
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
