Skip navigation

JSI Tip 7659. LsaSrv Event ID 5000 on a Windows 2000 domain controller that stops authenticating users?

The Event log on a Windows 2000 domain controller that ceases to authenticate users contains an error similar to:

Event Type: Error
Event Source: LsaSrv
Event Category: Devices
Event ID: 5000
User: N/A
Computer: <ComputerName>
Description: The security package Negotiate generated an exception. The package is now disabled. The exception information is the data.
0000: c0000005 00000000 00000000 78566df3
0010: 00000002 00000000 0000000c 0001003f
0020: 00000000 00000000 00000000 00000000
0030: 00000000 00000000 ffff027f ffff0020
0040: ffffffff 70181b1a 06d9001b 70173910

To fix this problem, see the Resolution in The Active Directory DIT file grows too fast.

NOTE: See Description of the Standard Terminology That Is Used to Describe Microsoft Product Updates, Tools, and Add-ons.

NOTE: See New Naming Schema for Microsoft Windows Hotfix Packages.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.