event id 40960

[mcgiverohno]

I keep getting locked out of my network.

Source LSASRV
Category SPNEGO ( Negotiator)
Type Warning Event ID 40960
User N/A
Computer xxxxx210

Description
The Security System detected an attempted downgrade attack for
server cifs/xxxxx01. The failure code from authentication protocol KERBEROS was " The user account has been automatically locked because too many invalid logon attempts or password change attempts have been requested (0xc0000234)"

Can someone please help this happens all day long everyday???

is there anything (software ) availible to track or look at what is makeing this happen.

MY help desk said it was a peice of software trying to authenticat. ANY HELP PLEASE.

Thanks Mcgiverohno

 

[linney]

Try entering your error at these sites.

http://www.microsoft.com/technet/tr.../prodtechnol/winxppro/support/EE_winxppro.asp

http://www.eventid.net/events.asp

 

[clc95624]

Have you changed your password recently and am still logged onto a PC with the old password. This happens to me every couple of months (having a PC out there that I forgot to log off from).
CLC95624

 

[bcastner]

You can track logon events at the server to troubleshoot the issue.

For a discussion and possible solution to the problem, see:

http://www.eventid.net/display.asp?eventid=40960&source=lsasrv