• Ask the community now
  • Publish
Ad

News

WWF Slaps U.S. Government Over Lack Of Energy Efficiency Progress

Washington D.C. - Just in time for next week's G8 summit in Japan, the World Wildlife Fund (WWF) has released a new report examining the progress of each of the G8 countries toward addressing climate change, a main focus of this year's meeting. Read more

ATI Catalyst drivers for Windows 2000/XP 4.5 unveiled

This unified driver has been further enhanced to provide the highest level of power, performance, and reliability. Read more

Windows 2000/XP fall through Wi-Fi flaw

Hackers have exposed details of a previously undocumented flaw in Microsoft's handling of Wi-Fi which affects users of Windows 2000 and XP. Read more

Exploit already available for Windows vulnerability

The availability of an exploit that takes advantage of a critical vulnerability in Microsoft's Windows 2000 software just a day after the flaw was disclosed is fueling concerns of another Zotob-like worm outbreak. Read more

Latest Reviews & Articles

Village Tronic ViBook: Multi-Monitor For Your Netbook

Village Tronic ViBook: Multi-Monitor For Your Netbook

Once you've used a multi-monitor setup, it's almost impossible to go back to a single screen. Notebook users likely feel this pain most sharply. However, Village Tronic's ViBook proposes a USB-based solution for the folks looking for more display space. Read more

Setting Up Your First 64-Bit Digital Audio Workstation

Setting Up Your First 64-Bit Digital Audio Workstation

You already know how to build a PC. But do you know how to take desktop hardware components and turn them into a digital audio workstation? John Brandon discusses how he pieced together his latest musical creation, along with the accompanying software. Read more

Windows 7 Versus XP: Which Belongs On Your Netbook?

Windows 7 Versus XP: Which Belongs On Your Netbook?

Windows Vista was never really an option for netbook users, but the release candidate of Windows 7 piqued our interest. Can Microsoft finally retire Windows XP in the netbook space? Even now with RC1 available, the answer seems tied to driver development. Read more

A Lesson In Backup: Taking Care Of Your Data

A Lesson In Backup: Taking Care Of Your Data

If you aren't regularly backing up your data, now's a good time to start. In this piece we cover some of the basic backup strategies, a handful of available tools, and backup performance over USB 2.0 using Samsung's newest Story Station external drive. Read more

All the Reviews & Articles

Windows 2000/XP gets locked out

Tom's Hardware: Over 1.4 million members in 6 different countries available to answer all your high-tech questions. Sign up now! Its free!
Word :    Username :           
 

Archived from groups: microsoft.public.win2000.active_directory (More info?)

 

Hello,

Unusual activity on my network where users are already logged in but get
locked out all of a sudden. This has happend to 5 people already. They dont
even attempt to try to change the password or are not logging in anywhere
else. Their account just gets locked out during they day. Here are event
errors.

Source: LSASRV
Catgory: SPNEGO (Negotiator)
Event ID: 40960

The Security System detected an attempted downgrade attack for server
cifs/PHXCRP99DC3. The failure code from authentication protocol Kerberos was
"The user account has been automatically locked because too many invalid
logon attempts or password change attempts have been requested.
(0xc0000234)".

This also follows:

Source: LSASRV
Catgory: SPNEGO (Negotiator)
Event ID: 40961
The Security System could not establish a secured connection with the server
cifs/PHXCRP99DC3. No authentication protocol was available.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Anyone have idead why this is happening?

Jimmy K

Sponsored Links
Register or log in to remove.

Archived from groups: microsoft.public.win2000.active_directory (More info?)

 

Pls check.

http://eventid.net/display.asp?eve [...] rv&phase=1

http://eventid.net/display.asp?eve [...] rv&phase=1

br,
Denis

"Jimmy K" <JimmyK@discussions.microsoft.com> wrote in message
news:0D6BDBA3-2CA7-4975-A03A-9B410D9BC13B@microsoft.com...
> Hello,
>
> Unusual activity on my network where users are already logged in but get
> locked out all of a sudden. This has happend to 5 people already. They
dont
> even attempt to try to change the password or are not logging in anywhere
> else. Their account just gets locked out during they day. Here are event
> errors.
>
> Source: LSASRV
> Catgory: SPNEGO (Negotiator)
> Event ID: 40960
>
> The Security System detected an attempted downgrade attack for server
> cifs/PHXCRP99DC3. The failure code from authentication protocol Kerberos
was
> "The user account has been automatically locked because too many invalid
> logon attempts or password change attempts have been requested.
> (0xc0000234)".
>
> This also follows:
>
> Source: LSASRV
> Catgory: SPNEGO (Negotiator)
> Event ID: 40961
> The Security System could not establish a secured connection with the
server
> cifs/PHXCRP99DC3. No authentication protocol was available.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>
> Anyone have idead why this is happening?
>
> Jimmy K
>

Reply to Anonymous

Archived from groups: microsoft.public.win2000.active_directory (More info?)

 

Jimmy,

What OS are these users running? If they are using 9x, there is a bug that
does 3-5 logon attempts in the normal logon process and so errors in logons
are amplified and users get logged out.

Also, this can be one of the first tell-tale signs of virus and spyware as
repeated logon attempts by the virus are attempted against well-known
accounts. Look at your security logs for repeated attempts by specific
computers and deal with those.

--
Ryan Hanisco
MCSE, MCDBA
FlagShip Integration Services
Chicago, IL

"Jimmy K" <JimmyK@discussions.microsoft.com> wrote in message
news:0D6BDBA3-2CA7-4975-A03A-9B410D9BC13B@microsoft.com...
> Hello,
>
> Unusual activity on my network where users are already logged in but get
> locked out all of a sudden. This has happend to 5 people already. They
> dont
> even attempt to try to change the password or are not logging in anywhere
> else. Their account just gets locked out during they day. Here are event
> errors.
>
> Source: LSASRV
> Catgory: SPNEGO (Negotiator)
> Event ID: 40960
>
> The Security System detected an attempted downgrade attack for server
> cifs/PHXCRP99DC3. The failure code from authentication protocol Kerberos
> was
> "The user account has been automatically locked because too many invalid
> logon attempts or password change attempts have been requested.
> (0xc0000234)".
>
> This also follows:
>
> Source: LSASRV
> Catgory: SPNEGO (Negotiator)
> Event ID: 40961
> The Security System could not establish a secured connection with the
> server
> cifs/PHXCRP99DC3. No authentication protocol was available.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>
> Anyone have idead why this is happening?
>
> Jimmy K
>

Reply to Anonymous
Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > Windows 2000/XP gets locked out
Go to:

There are 880 identified and unidentified users. To see the list of identified users, Click here.

You are about to answer a thread that has been inactive for more than 6 months. If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread. Add a reply Cancel
Sponsored links