We installed a new Windows Server 2008 R2 Server last year, and changed the Domain level to 2008. Since then we have been having various issues which only affect XP machines. All Windows 7 computers are absolutely fine.
The problems:
1.) Computers when first logged into in the morning are unremarkable slow and un-responisive. When you finally get to click restart, an error message appears "You do not have administrative privileges to shut down this computer"
2.) The computer will not be able to connect to some servers. A log in box will appear but the user, nor the administrator can successfully log in.
3.) The user cannot print every morning. The print spooler reports to be started and running problem free, and no error messages appear other then the printer icon in the taskbar with a red question mark. To resolve this, you need to restart the print spooler and then click refresh on the print. This then solves the problem for the rest of the day.
These are the error's we are getting on the computers event logs:
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 15/02/2011
Time: 09:04:36
User: N/A
Computer: PC-07
Description:
The Security System detected an attempted downgrade attack for server cifs/server. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request.
(0xc000005e)".
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 15/02/2011
Time: 09:04:30
User: N/A
Computer: PC-07
Description:
The Security System could not establish a secured connection with the server cifs/sql. No authentication protocol was available.
For more information, see Help and Support Center at
This problem also doesn't affect every XP machine, and seems to follow users. Computers which have this issues have been rebuilt which resolved the problem, but within a few months the problem has come back and been persistant since. We have also tried swapping computers and even components, so I think this could be user related.
I am totally lost, and our local IT Support company are struggling with this.
Any ideas or suggestions would be greatly appriciated, as I have tried and read so many different forums and hotfixes.
Cheers,
Matt
The problems:
1.) Computers when first logged into in the morning are unremarkable slow and un-responisive. When you finally get to click restart, an error message appears "You do not have administrative privileges to shut down this computer"
2.) The computer will not be able to connect to some servers. A log in box will appear but the user, nor the administrator can successfully log in.
3.) The user cannot print every morning. The print spooler reports to be started and running problem free, and no error messages appear other then the printer icon in the taskbar with a red question mark. To resolve this, you need to restart the print spooler and then click refresh on the print. This then solves the problem for the rest of the day.
These are the error's we are getting on the computers event logs:
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 15/02/2011
Time: 09:04:36
User: N/A
Computer: PC-07
Description:
The Security System detected an attempted downgrade attack for server cifs/server. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request.
(0xc000005e)".
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 15/02/2011
Time: 09:04:30
User: N/A
Computer: PC-07
Description:
The Security System could not establish a secured connection with the server cifs/sql. No authentication protocol was available.
For more information, see Help and Support Center at
This problem also doesn't affect every XP machine, and seems to follow users. Computers which have this issues have been rebuilt which resolved the problem, but within a few months the problem has come back and been persistant since. We have also tried swapping computers and even components, so I think this could be user related.
I am totally lost, and our local IT Support company are struggling with this.
Any ideas or suggestions would be greatly appriciated, as I have tried and read so many different forums and hotfixes.
Cheers,
Matt
