Hi All, I have been scouring this forum and the rest of the net to try and find a resolution for a problem and was wondering if anyone can help. We have an AD domain which consists of 3 servers and for some reason one of them just started to automatically logs off the Administrator or any other user as soon as you log on. I have tried re-booting to no avail. Also does the same in Safe Mode. The server itself is working fine and you can access the hard drives from another server fine. The problems I have found in the event logs are : - Source: LSASRV Category: SPNEGO Event ID:40960 Error ID:0xc000006d The Security System detected an authentication error for the server (SERVERNAME) The failure code from authentication protocol Kerberos "The attempted logon is invalid. This is either due to a bad username or authentication information. Source: Kerberos Category: None Event ID:14 There were password errors using the Credential Manager. To remedy, launch the Stored User Names and Passwords control panel applet and reenter the password for the credential (DOMAIN\USERNAME) I have tried copying the userinit.exe file from I386 to System32. All automatic services have started and the functionality of the server itself is fine...I just can't logon. I have ran anti-virus and anti spyware across the drives with nothing detected. If anyone has any thoughs, suggestions or ideas on this they would be greatly appreciated. Thank you very much in advance for any help you can offer. Gary.

http://www.eventid.net/display.asp?... Knowing the correct answer and giving a correct answer, are two different things

Thanks wanderer...several sites have pointed to a time issue between the servers. The server in question normally sets the time on the clients so I have tried changing that to one of the others. I woukld like to run some commands but as it's RAID5 it's difficult to get to the command prompt as the drives aren't recognised froom a boot CD without installing the SCSI controller drivers. Maybe i'll have to hunt them down. Anmy other information or suggestions on what to try would be much appreciated. Thanks again! Gary.

use psexec to connect to the server from a workstation. You will get a command prompt, use "net time" or another time utility

Thanks bilbus, much appreciated. I found this utility last night. It's really handy. The only odd thing is if I use the net time command it tells me the current time (then gives a different servername and NOT the one the logon script points it to aquire the time from?) I tried to use sfc.exe to replace any system files at the next boot but you must be logged on for this to run so as soon as it starts to execute, Administrator logs off and it can't complete. Any other ideas for this problem would be greatly appreciated, there just seems to be no way to log on to this server. Thank you very much in advance if you casn offer any advice. Kind Regards, Gary.