Hi,
   Thanks but I had gone through eventid.net's answers before posting and didn't find 
much help there.  I did try one thing that was mentioned and that was to disable 
"Microsoft Network Server: Digitally sign communications (always)" in the Local 
Security Policy (and then a reboot) but it didn't help.

Mike Thommes

-----Original Message-----
From: Santhosh Sivarajan [mailto:[EMAIL PROTECTED]
Sent: Monday, January 05, 2004 4:17 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Eventid 40961 on W2K DC upgraded to Server 2003


Check out the following link 

http://www.eventid.net/display.asp?eventid=40961&source=


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M.
Sent: Monday, January 05, 2004 3:47 PM
To: Active Directory Mailing List (E-mail)
Subject: [ActiveDir] Eventid 40961 on W2K DC upgraded to Server 2003

Hi All,
    We are seeing Eventid 40961 generated every hour on Windows 2000 DCs
that have been upgraded to Server 2003 and every two hours on fresh Server
2003 DCs.  The contents look like the following:


>
>Event Type:    Warning
>Event Source:  LSASRV
>Event Category:        SPNEGO (Negotiator)=20
>Event ID:      40961
>Date:          12/23/2003
>Time:          3:06:40 PM
>User:          N/A
>Computer:      NEDC1
>Description:
>The Security System could not establish a secured connection with the =
>server DNS/dns0.anl.gov.  No authentication protocol was available.

Our Bind DNS server does not allow A record updating.  We were able to
circumvent this problem under Windows 2000 with the following registery key:

        HKLM\SYSTEM\CCS\Services\Netlogon\Parameters\RegisterDnsARecords = 0

Unfortunately, it appears to have no effect under Server 2003.  Has anyone
else seen this error and, if so, have you found a way to get around it under
Server 2003?  Thanks in advance for any info!

Mike Thommes

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to