JSI Tip 7089. When you start a newly promoted Windows Server 2003 domain controller, you receive Event IDs 40960 and 40961?

After promoting a Windows Server 2003 computer, you receive the following System events:

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: date
Time: time
User: N/A
Computer:
Description: The Security System detected an authentication error for the server ldap/dca.acc.local. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request. (0xc000005e)".
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data: 0000: c000005e

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: date
Time: time
User: N/A
Computer:
Description: The Security System could not establish a secured connection with the server ldap/Computername.domain.com. No authentication protocol was available.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data: 0000: c0000388

If the File Replication Service (Ntfrs.exe) tries to authenticate before the directory service has started, you will receive these events.

If Active Directory starts successfully, you should ignore these Event IDs. If they continue to appear on subsequent restarts, you will have to troubleshoot the directory service.