event id 3034 mrxsmb

[skfm]

Hi all,
I have a Windows 2000 sp4 server. This error message keeps appearing in the system event log "The redirector was unable to initialize security context or query context attributes"
It is not a DC.
I Couldn't view/modify network properties, no network access although ping worked. I can't view its share files although it show the folders has already been shared.
When I try to view this server from another pc, it gives me an error" \\xxxsvr is not accessible, the specified server cannot perform the requested operation."

At my event viewer I see this message filling up the whole system log.

Event Type: Warning
Event Source: MRxSmb
Event Category: None
Event ID: 3034
Date: 7/27/2006
Time: 1:49:53 PM
User: N/A
Computer: xxxsvr
Description:
The redirector was unable to initialize security context or query context attributes.
Data:
0000: 00080000 00560002 00000000 80000bda
0010: 00000000 c00000fe 00000000 00000000
0020: 00000000 00000000 0000047d c00000fe

Any idea, As I have lookup the web and Microsoft KB, it isn't much help.

Thanks

 

[tfg13]

This article:

http://support.microsoft.com/default.aspx?scid=kb;en-us;263142

must be the one that you are stating isn't much help. I agree, but it does point at some things you can "experiment" with. Particularly, SMB.

Not indicating whether this is in a domain or not kind of hampers the directions we can go with this. Let us know the entire setup...

 

[skfm]

thanks tftg13,
well xxxsvr is not a domain controller it's my mail server. And it is just one of the servers in my domain xxx.com. The think is I have checked my DC, I will call it xxdc.It is running dns. I checked for duplicated names, and there is nothing there. I used the netlookup to check it out, it came out right.With the correct name and ip. The thing i am really confuse is, mails can be send/receive without any problem.
I notice the only thing is, it does not seems to be able to authenticate itself with the DC. When i tried to check the rights or add any user domain, it says it cannot perform the requested operation.But i can see my domain xxx.com.
I tried reinstalling the service patch as suggested by one of the forum, but the problem is still there.

thanks

 

[skfm]

Hi tftg13,

Just check out the WInKB, it came out with this error STATUS_INVALID_PARAMETER_1.from ntstatus.h Dont know what it means....
Probably you can help....


thanks

 

[tfg13]

On your server that has the issues, look in the local group policy (or the domain policy) and look for the following:

Computer Configuation \ Windows Settings \ Security Settings \ Local Policies \ Security Options

Look for the following:

1. Secure Channel: Digitally sign or encrypt secure data channel (always)
2. Secure Channel: Digitally sign or encrypt secure data channel (When possible)
3. Secure Channel: Digitally sign secure data channel (When possible)
4. Secure Channel: Require Strong (Windows 2000 or later) session key

On these, my server who is a member of a domain has the following settings (they are not overwritten by a domain policy) 1, and 4 are set to disabled, and 2 and 3 are enabled.

You may ask why is number 4 disabled?

http://technet2.microsoft.com/Windo...7a96-4e65-b47d-3452399507fa1033.mspx?mfr=true