Events 15, 40961, 40960 & 5719

[Guest]

Archived from groups: microsoft.public.windowsxp.general (More info?)

Multiple alerts in one of our XP event logs. Any ideas?

Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 15
Date: 18/08/2005
Time: 6:10:37 AM
User: N/A
Computer: LSPROXY
Description:
Automatic certificate enrollment for local system failed to contact the
active directory (0x80072095). A directory service error has occurred.
Enrollment will not be performed.



Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 18/08/2005
Time: 9:11:34 AM
User: N/A
Computer: LSPROXY
Description:
The Security System could not establish a secured connection with the server
DNS/docs.domainname.com. No authentication protocol was available.



Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 18/08/2005
Time: 9:11:34 AM
User: N/A
Computer: LSPROXY
Description:
The Security System detected an attempted downgrade attack for server
DNS/docs.domainname.com. The failure code from authentication protocol
Kerberos was "No authority could be contacted for authentication.
(0x80090311)".



Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date: 18/08/2005
Time: 6:46:34 AM
User: N/A
Computer: LSPROXY
Description:
No Domain Controller is available for domain DOMAINNAME due to the following:
The RPC server is unavailable. .
Make sure that the computer is connected to the network and try again. If
the problem persists, please contact your domain administrator.

 

[Guest]

Archived from groups: microsoft.public.windowsxp.general (More info?)

Click the [+] Related Knowledge Base articles at the bottom of each link.

ID: 15
Source: autoenrollment
http://www.microsoft.com/technet/support/ee/result.aspx?EvtSrc=autoenrollment&EvtID=15&ProdName=Windows+Operating+System&LCID=1033&ProdVer=5.2

ID: 40961
Source: lsasrv
http://www.microsoft.com/technet/support/ee/result.aspx?EvtSrc=lsasrv&EvtID=40961&ProdName=Windows+Operating+System&LCID=1033&ProdVer=5.2

ID: 40960
Source: lsasrv
http://www.microsoft.com/technet/support/ee/result.aspx?EvtSrc=lsasrv&EvtID=40960&ProdName=Windows+Operating+System&LCID=1033&ProdVer=5.2

ID: 5719
Source: NetLogon
http://www.microsoft.com/technet/support/ee/result.aspx?EvtSrc=NetLogon&EvtID=5719&ProdName=Windows+Operating+System&LCID=1033&ProdVer=5.2


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:AEAEA448-AFB4-4DD4-BB98-11950E6EF483@microsoft.com,
Brett Lindsey <BrettLindsey@discussions.microsoft.com> hunted and pecked:
> Multiple alerts in one of our XP event logs. Any ideas?
>
> Event Type: Error
> Event Source: AutoEnrollment
> Event Category: None
> Event ID: 15
> Date: 18/08/2005
> Time: 6:10:37 AM
> User: N/A
> Computer: LSPROXY
> Description:
> Automatic certificate enrollment for local system failed to contact the
> active directory (0x80072095). A directory service error has occurred.
> Enrollment will not be performed.
>
>
>
> Event Type: Warning
> Event Source: LSASRV
> Event Category: SPNEGO (Negotiator)
> Event ID: 40961
> Date: 18/08/2005
> Time: 9:11:34 AM
> User: N/A
> Computer: LSPROXY
> Description:
> The Security System could not establish a secured connection with the
> server DNS/docs.domainname.com. No authentication protocol was available.
>
>
>
> Event Type: Warning
> Event Source: LSASRV
> Event Category: SPNEGO (Negotiator)
> Event ID: 40960
> Date: 18/08/2005
> Time: 9:11:34 AM
> User: N/A
> Computer: LSPROXY
> Description:
> The Security System detected an attempted downgrade attack for server
> DNS/docs.domainname.com. The failure code from authentication protocol
> Kerberos was "No authority could be contacted for authentication.
> (0x80090311)".
>
>
>
> Event Type: Error
> Event Source: NETLOGON
> Event Category: None
> Event ID: 5719
> Date: 18/08/2005
> Time: 6:46:34 AM
> User: N/A
> Computer: LSPROXY
> Description:
> No Domain Controller is available for domain DOMAINNAME due to the
> following: The RPC server is unavailable. .
> Make sure that the computer is connected to the network and try again. If
> the problem persists, please contact your domain administrator.