Hi, I'm a networking noob and need some help troubleshooting a DNS registration problem from Windows Server 2003 (Hosted Web Server). I think the problem started after deleting a Windows user account for a ex-administrator, or changed password for the local Administrator account.
I have the following items in System Events:
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 2014/03/06
Time: 04:51:02 PM
User: N/A
Computer: MYSERVER
Description:
The Security System detected an authentication error for the server DNS/ns1.is.co.za. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request.
(0xc000005e)".
Event Type: Warning
Event Source: DnsApi
Event Category: None
Event ID: 11166
Date: 2014/03/06
Time: 05:04:09 PM
User: N/A
Computer: MYSERVER
Description:
The system failed to register host (A) resource records (RRs) for network adapter
with settings:
Adapter Name : {A1B1C7A7-22E4-4CD7-1111-6C92E71E63E2}
Host Name : myserver
Primary Domain Suffix : onsite.hosting.co.za
DNS server list :
168.210.2.2, 196.14.239.2
Sent update to server : 196.4.160.7
IP Address(es) :
196.123.123.123
The reason the system could not register these RRs was because of a security related problem. The cause of this could be (a) your computer does not have permissions to register and update the specific DNS domain name set for this adapter, or (b) there might have been a problem negotiating valid credentials with the DNS server during the processing of the update request.
You can manually retry DNS registration of the network adapter and its settings by typing "ipconfig /registerdns" at the command prompt. If problems still persist, contact your DNS server or network systems administrator. For specific error code, see the record data displayed below.
And, possibly related in Security Events:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 2014/03/06
Time: 06:19:00 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: MYSERVER
Logon Type: 4
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: MYSERVER
Caller User Name: MYSERVER$
Caller Domain: ONSITE-HOSTING
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 784
Transited Services: -
Source Network Address: -
Source Port: -
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 2014/03/06
Time: 06:19:00 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Administrator
Source Workstation: MYSERVER
Error Code: 0xC000006A
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
The account logon failure security events occur every minute.
Any assistance is greatly appreciated!
I have the following items in System Events:
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 2014/03/06
Time: 04:51:02 PM
User: N/A
Computer: MYSERVER
Description:
The Security System detected an authentication error for the server DNS/ns1.is.co.za. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request.
(0xc000005e)".
Event Type: Warning
Event Source: DnsApi
Event Category: None
Event ID: 11166
Date: 2014/03/06
Time: 05:04:09 PM
User: N/A
Computer: MYSERVER
Description:
The system failed to register host (A) resource records (RRs) for network adapter
with settings:
Adapter Name : {A1B1C7A7-22E4-4CD7-1111-6C92E71E63E2}
Host Name : myserver
Primary Domain Suffix : onsite.hosting.co.za
DNS server list :
168.210.2.2, 196.14.239.2
Sent update to server : 196.4.160.7
IP Address(es) :
196.123.123.123
The reason the system could not register these RRs was because of a security related problem. The cause of this could be (a) your computer does not have permissions to register and update the specific DNS domain name set for this adapter, or (b) there might have been a problem negotiating valid credentials with the DNS server during the processing of the update request.
You can manually retry DNS registration of the network adapter and its settings by typing "ipconfig /registerdns" at the command prompt. If problems still persist, contact your DNS server or network systems administrator. For specific error code, see the record data displayed below.
And, possibly related in Security Events:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 2014/03/06
Time: 06:19:00 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: MYSERVER
Logon Type: 4
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: MYSERVER
Caller User Name: MYSERVER$
Caller Domain: ONSITE-HOSTING
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 784
Transited Services: -
Source Network Address: -
Source Port: -
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 2014/03/06
Time: 06:19:00 PM
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Administrator
Source Workstation: MYSERVER
Error Code: 0xC000006A
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
The account logon failure security events occur every minute.
Any assistance is greatly appreciated!