The Event log on a Windows 2000 domain controller that ceases to authenticate users contains an error similar to:
Event Type: Error
Event Source: LsaSrv
Event Category: Devices
Event ID: 5000
User: N/A
Computer: <ComputerName>
Description: The security package Negotiate generated an exception. The package is now disabled.
The exception information is the data.
Data:
0000: c0000005 00000000 00000000 78566df3
0010: 00000002 00000000 0000000c 0001003f
0020: 00000000 00000000 00000000 00000000
0030: 00000000 00000000 ffff027f ffff0020
0040: ffffffff 70181b1a 06d9001b 70173910
To fix this problem, see the Resolution in The Active Directory DIT file grows too fast.
NOTE: See New Naming Schema for Microsoft Windows Hotfix Packages.