| Event Id | 40960 |
| Source | LSASRV |
| Description | The Security System detected an authentication error for the server %1. The failure code from authentication protocol %2 was %3. |
| Event Information | According to Microsoft: Explanation : The Local Security Authority (LSA) cannot complete the task because an authentication error occurred. Resolution : Use the error code in the message to determine the cause of the problem. For example, a STATUS_NO_LOGON_SERVER error code (0xC000005e) indicates that the domain controller was temporarily unavailable. ------------------------------------------------------------------------------------------------------------------ When you restart your Windows Server 2003-based computer after you promote it to the role of domain controller, the following events may appear in the System log of Event Viewer. CAUSE: This issue may occur if the File Replication Service (Ntfrs.exe) tries to authenticate before the directory service has started. WORKAROUND: To work around this issue, ignore these two warning events if the directory service starts successfully. If the events continue to appear after Windows has successfully restarted, you may have to troubleshoot the directory service. |
| Reference Links | Event ID40960 from Source lsasrv
LSASRV Event IDs 40960 and 40961 When You Promote a Server to a Domain Controller Role You cannot access resources after you install Security Bulletin MS04-011 or Windows XP Service Pack 2 Microsoft product: Windows Operating System Version: 5.2 Event Source: lsasrv Event ID: 40960 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.