Windows 2000 AD Domain
Microsoft Exchange 2000

Windows XP Professional
Microsoft Office 2003
User uses VPN to connect to the Corp. network via the dial-up ISP.

When connected to the network locally the user has full access to all
file shares, printers and the exchange server.

When the user connects through the VPN using a dial-up ISP, they
cannot access the network resources. When attempting to access file
shares or exchange server, two entries are made in the system event
log. Similar to the ones listed below

--------------------------------------------------------------------------------------

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 2/3/2005
Time: 1:56:48 PM
User: N/A
Computer: 8CXLX41
Description:
The Security System could not establish a secured connection with the
server cifs/server.domain.com. No authentication protocol was
available.

--------------------------------------------------------------------------------------

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 2/3/2005
Time: 1:56:48 PM
User: N/A
Computer: 8CXLX41
Description:
The Security System detected an attempted downgrade attack for server
cifs/server.domain.com. The failure code from authentication protocol
Kerberos was "There are currently no logon servers available to
service the logon request.
(0xc000005e)".

--------------------------------------------------------------------------------------

This is a user specific issue and doesn't seem to be related to the
machine. A second user can log on and access the network resources
from this machine and the first user connects using the same method on
a second machine and encounters the same problem.


I've contacted Microsoft Product support and they recommend I contact
the computer vendor, but Im pretty confident that its a OS issue.

Thanks for any and all advice

Tom

Re: User cannot access resources remotely by Leo

Leo
Fri Mar 04 11:26:57 CST 2005

http://support.microsoft.com/kb/891559

You may need to join the domain, then install the patch. I just
discovered this issue as well and am trying to troubleshoot it.

--
--Leo

Tom Thompson wrote:

> Windows 2000 AD Domain
> Microsoft Exchange 2000
>
> Windows XP Professional
> Microsoft Office 2003
> User uses VPN to connect to the Corp. network via the dial-up ISP.
>
> When connected to the network locally the user has full access to all
> file shares, printers and the exchange server.
>
> When the user connects through the VPN using a dial-up ISP, they
> cannot access the network resources. When attempting to access file
> shares or exchange server, two entries are made in the system event
> log. Similar to the ones listed below
>
> --------------------------------------------------------------------------------------
>
> Event Type: Warning
> Event Source: LSASRV
> Event Category: SPNEGO (Negotiator)
> Event ID: 40961
> Date: 2/3/2005
> Time: 1:56:48 PM
> User: N/A
> Computer: 8CXLX41
> Description:
> The Security System could not establish a secured connection with the
> server cifs/server.domain.com. No authentication protocol was
> available.
>
> --------------------------------------------------------------------------------------
>
> Event Type: Warning
> Event Source: LSASRV
> Event Category: SPNEGO (Negotiator)
> Event ID: 40960
> Date: 2/3/2005
> Time: 1:56:48 PM
> User: N/A
> Computer: 8CXLX41
> Description:
> The Security System detected an attempted downgrade attack for server
> cifs/server.domain.com. The failure code from authentication protocol
> Kerberos was "There are currently no logon servers available to
> service the logon request.
> (0xc000005e)".
>
> --------------------------------------------------------------------------------------
>
> This is a user specific issue and doesn't seem to be related to the
> machine. A second user can log on and access the network resources
> from this machine and the first user connects using the same method on
> a second machine and encounters the same problem.
>
>
> I've contacted Microsoft Product support and they recommend I contact
> the computer vendor, but Im pretty confident that its a OS issue.
>
> Thanks for any and all advice
>
> Tom
>
>
>
>
>
>
>
>
>