Prezados amigos,
Estou enfrentando um problema em um dos meus clientes, que é o seguinte. O servidor começa a rejeitar autenticação dos usuário pela rede, remote desktop e logon local no próprio servidor com a conta de administrador.
Os erros que são mostrados no LOG de eventos são 7011 e 36888:
Log Name: System
Source: Schannel
Date: 11/10/2016 11:58:22
Event ID: 36888
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: "********"
Description:
A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
<EventID>36888</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2016-10-11T14:58:22.274747300Z" />
<EventRecordID>169479</EventRecordID>
<Correlation />
<Execution ProcessID="556" ThreadID="4104" />
<Channel>System</Channel>
<Computer>*********</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="AlertDesc">10</Data>
<Data Name="ErrorState">1203</Data>
</EventData>
</Event>
Outro erro:
Log Name: System
Source: Service Control Manager
Date: 11/10/2016 12:04:17
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: **********
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the netprofm service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-10-11T15:04:17.229128900Z" />
<EventRecordID>169482</EventRecordID>
<Correlation />
<Execution ProcessID="540" ThreadID="6620" />
<Channel>System</Channel>
<Computer>***********</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">netprofm</Data>
</EventData>
</Event>
Esse último erro se repete com o serviço fdPHost
O erro 36888 se repete diversas vezes ao dia o 7011 somente uma vez ao dia.
Por enquanto tenho reiniciado o servidor e o mesmo retorna a normalidade até apresentar os mesmos erros.
Alguém já passou por isso?
