There seems to be a distinct lack of a serv2k3 section so i guess i'll just post here.
Anyway... I decided to check the logs on my file server today and a specific message cought my eye (due to several hundred entries).
Source: LSASRV
Category: SPNEGO (Negotiator)
Event ID: 40960
Type: Warning
User: N/A
The Security System detected an authentication error for the server DNS/ns1.mydyndns.org. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request.
(0xc000005e)".
This messages appears every 1 hour exactly. 5:08, 6:08, 7:08, etc... It is the only warning message that appears in the log. I researched that event ID and most people seemed to have it appear along with 40961 and it occured on domain controllers. My server is currently not a domain controller. It is only running DHCP, DNS, and IIS FTP. These messages first appeared on 1/15/06 at 1:08pm. I havent gotten any updates, made any changes or restarted my server since 1/1/06 (had a 12hr power outtage).
My domain name is registered through dyndns.org but I do not update my ip using this server, my router updates the dns record when my ip changes (dsl ip changes every week or so even when connected 24/7). It is sort of bizarre why ns1.mydyndns.org would appear on there. I even cut off all ports forwarded to that server and the message still shows up.
I'm sure the problem will wind up being something DNS related... On windows servers, when in doubt blame dns lol.
Anyway... I decided to check the logs on my file server today and a specific message cought my eye (due to several hundred entries).
Source: LSASRV
Category: SPNEGO (Negotiator)
Event ID: 40960
Type: Warning
User: N/A
The Security System detected an authentication error for the server DNS/ns1.mydyndns.org. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request.
(0xc000005e)".
This messages appears every 1 hour exactly. 5:08, 6:08, 7:08, etc... It is the only warning message that appears in the log. I researched that event ID and most people seemed to have it appear along with 40961 and it occured on domain controllers. My server is currently not a domain controller. It is only running DHCP, DNS, and IIS FTP. These messages first appeared on 1/15/06 at 1:08pm. I havent gotten any updates, made any changes or restarted my server since 1/1/06 (had a 12hr power outtage).
My domain name is registered through dyndns.org but I do not update my ip using this server, my router updates the dns record when my ip changes (dsl ip changes every week or so even when connected 24/7). It is sort of bizarre why ns1.mydyndns.org would appear on there. I even cut off all ports forwarded to that server and the message still shows up.
I'm sure the problem will wind up being something DNS related... On windows servers, when in doubt blame dns lol.