Concerning event logs

[JSM7]

This event log is appearing
It is a windows 2003 server running citrix?
Any Ideas?

Userenv event id 1053
Windows cannot determine the user or computer name. (The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. ). Group Policy processing aborted.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

 

[MikeBatters]

I have seen this before as it is not as serious as it sounds.

From memory it is related to Kerberos authentication not responding fast enoungh and the client trying a less secure form of authentication (like NTLM)

Have a look on

http://www.microsoft.com/technet

and search the KB for "Windows 2003 1053" and the answer will be there.

You may also find you get similar errors logged on XP Pro machines too.

Mike

*************************************

Remember - There is always another way..........