"kyrik" <(E-Mail Removed)> wrote in message news:3C82CBED-5C0E-4B5C-90F0-(E-Mail Removed)...
> hello folks,
> I've five windows server 2003 (sp2) one DC and 4 member servers. On one of
> the member server i get warrning
> LSASRV; SPNEGO; event id 40960 and then i can't logon on domain accounts to
> this server. After reboot everythink works well but this problem occures
> again after 3-4 days. It looks like this member server can't find DC. Other
> member servers works fine.
> Any suggestion?
>
> regards
> Kyrik
>
Usually the fix it to make sure a reverse zone exists and there's a PTR for the DCs and everything else. However in some cases, from experience, I've seen it occur because the logged on account has restrictions in AD. If the account stays logged on longer than the Kerberos ticket (say if the user just locks the workstation instead of restarting or logging off), for some reason (and haven't heard of a fix for this yet), the account cannot renew the ticket. Usually with a server, a simple log off and logon will do the trick, however we've found that if the account is logged on to a workstation for multiple days, it needs to be rebooted.
--
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
(E-Mail Removed)
For urgent issues, you may want to contact Microsoft PSS directly. Please
check
http://support.microsoft.com for regional support phone numbers.
"Efficiency is doing things right; effectiveness is doing the right things." - Peter F. Drucker
http://twitter.com/acefekay