Windows 10: Event ID -409600x80090311:The Security System detected an authentication error for the...

Hi Team,


We are experiencing the event id 40960 from half the Windows 10 workstations - These workstations are spread across different sites . Though the sites were having a local domain controller before , due to some issues , these local DC's were removed and now the workstation from these sites are connected to the main domain controller .


"The Security System detected an authentication error for the server cifs/dc04. The failure code from authentication protocol Kerberos was "No authority could be contacted for authentication. 0x80090311".


The user can log on to the workstation , but unable to get the mapped drives workings , GPO not getting applied etc.

Even if we browse from these workstation, to any of the DC's "netlogon" folder , it is prompting for the user name and password.


Have tried the following and still could not get the issue resolved -


DCDIAG - no error reported from the DC's two DC's are at the main site - Windows 2016 DC's & DNS

nltest - no error

dns - no error

etc


From the client - when getting the following error for nltest /dclist

nltest /dclist:MYDC.LAZ

Get list of DCs in domain 'MYDC.LAZ' from '\\LES-EXC02.MYDC.LAZ'.

Cannot DsBind to mydc.laz \\LAZ-EXC02.MYDC.LAZ.Status = 2148074320 0x80090350 SEC_E_DOWNGRADE_DETECTED.


Removed the WS and added back to the domain


Checked the MTU Size and no fragmentation at all


Checked the Tech forum and could not find a resolution relating to the fault I am facing .


Please help since I am hit the wall

:)

 

Kernel-Power event id 41. BugcheckCode 0

Hello,

Thank you for writing to Microsoft Community Forums.

In-order to get more clarity on this issue and to assist you with appropriate troubleshooting steps, reply with answers to the below questions:

1. Are you aware of any changes made on your PC, prior to this issue?
   
2. Is this issue specific while playing a particular game?
   
3. Which edition of Windows are you currently using?
   

A Kernel Power Event 41 can occur in the following scenarios.

Scenario 1: The computer restarts, and there is a Stop error BugcheckCode in the event data.

Scenario 2: The computer is shut down by pressing and holding the power button.

Scenario 3: The system randomly restarts and no Stop error BugcheckCode is listed, or the computer is completely unresponsive (hard hang).

I suggest you refer the article on Kernel
Power Event ID 41 and follow the steps for the scenario that is causing this error on your PC.

Additionally, you can refer the article on Windows
Kernel event ID 41 error "The system has rebooted without cleanly shutting down first" in Windows
and check if that helps.

Regards,

Sandeep Kumar M

Microsoft Community – Moderator

 

System Error.

Event ID for each error? List those, will tell you what caused it on the Microsoft Knowledge Base.

 

Event ID 10016

Solved Numerous event id 10016 errors win 8 pro 64 bit

Here is the basic outline ...

1. Search the registry for the CLSID
2. Make note of the Default Value, which is the name (ex. ShellExperienceHost, RuntimeBroker) you're going to look for in DCOM
3. Change the Owner to Administrators
4. Give Administrators Full Control
5. Repeat steps 1-4 for the APPID
6. WinKey + s > type in component services > click on Component Services in list
7. Component Services > Computers > My Computer > DCOM Config
8. Change the View to Details
9. Find the name from step 2 (ex. ShellExperienceHost, RuntimeBroker)
10. Right Click on the Name > Properties
11. Select the Security Tab
12. Launch & Activation Permissions > Click Edit
13. Look for the offending user from the 10016 (ex. System, Local Service) and make sure it has the activation requested (ex. Local Activation). If the offending user does NOT exist, you have to add it and give it Local Launch and Local Activation
14. Click Apply
15. Close DCOM and Regedit
16. Reboot PC

Note: Make sure you understand the steps before doing them