some error log!!!!???
Hi,
I don't know the cause of these errors!!??
Are they serious!!!!
Thank you.
-----
Regards
Mahnaz
------------
Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 4
Date: 2007/05/02
Time: 12:11:18 ?.?
User: N/A
Computer: COMPUTER-90
Description:
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server COMPUTER-100$. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (domainname), and the client realm. Please contact your system administrator.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
--------------------------
Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 2007/05/01
Time: 09:47:51 ?.?
User: N/A
Computer: COMPUTER-90
Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....?..?
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
---------------------
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 2007/05/01
Time: 09:05:41 ?.?
User: N/A
Computer: COMPUTER-90
Description:
The Security System could not establish a secured connection with the server ldap/domainname. No authentication protocol was available.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
----------------------------
Software/Hardware used:
Software/Hardware used:
ASKED:
May 2, 2007 3:10 AM
UPDATED:
May 2, 2007 9:05 PM
Answer Wiki:
First off, have you followed up on the suggestions/observations in the error messages?
Reference to duplicate named machines for example, and clicking on the link to microsoft (which will pass them the data in the error message. Some of these can be quite helpful.
Other things I've seen which can cause this sort of thing are where on of the machines has been either turned off for a few weeks, or has just been restored from an older backup image.
Related to this is that there is an encrypted password between machines in a domain (NT4 onward) which is changed automatically every so often. If it gets out of sync with the domain controller, then it will be considered invalid.
Hope that helps,
Bob
To see all answers submitted to the Answer Wiki: View Answer History.
A good source for event logs is eventid. net
A good source for event logs is eventid. net