40960 Error after Admin password change

[OregonSteve]

Greetings-

Single site, single domain; three DCs; Exchange Server 2003.

After changing the Domain Admin password we started getting these errors in the System Log on our Exchange server about every 90 minutes and they come in pairs: One referring to DC1 and one about DC2. Here's a sample:

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 3/7/2006
Time: 4:53:01 PM
User: N/A
Computer: LEGEXCH
Description:
The Security System detected an authentication error for the server ldap/DC1.domain.local/domain.local@domain.local. The failure code from authentication protocol Kerberos was "The attempted logon is invalid. This is either due to a bad username or authentication information.

What service or process could be attempting to run at this time interval? Would a reboot help? Of which box(es)?

Thanx
OregonSteve

"..You should never, never doubt what nobody is sure about." -Willy Wonka

 

[porkchopexpress]

Have you tried the exchange forum?

forum955

 

[OregonSteve]

No, I haven't. As this is related to the Domain Admin password (apparently) and not Exchange functionality (apparently) I thought I'd have a better chance of a timely response in this forum. Besides, to the best of my knowledge, all services and processes related to Exchange run under System Accounts and not as Domain Admin.

Thanx
OregonSteve

"..You should never, never doubt what nobody is sure about." -Willy Wonka

 

[porkchopexpress]

I see your point i was just thinking that other Exchange admins might of observed this error, i've not seen this error before after changing the DA password even when a service has been configured to logon with that account.

 

[porkchopexpress]

I had seen a thread where someone was receiving the same error and a fix was to change the admin password again and reboot the server receiving the error.

I can't find the thread again now.