Question : LAN access issues with XP, but not 2000....

Hello,

I have 3 XP Pro. boxes on my Win2k Domain which after X amount of time need to be logged off or LAN access is not permitted.  This is not happening on my Windows 2000 boxes.  Here are a few of the events:


Security:
1)

Event Type:      Warning
Event Source:      LSASRV
Event Category:      SPNEGO (Negotiator)
Event ID:      40961
Date:            7/6/2004
Time:            2:33:18 PM
User:            N/A
Computer:      xxxxx
Description:
The Security System could not establish a secured connection with the server cifs/Acad.  No authentication protocol was available.

2)

Event Type:      Warning
Event Source:      LSASRV
Event Category:      SPNEGO (Negotiator)
Event ID:      40960
Date:            7/6/2004
Time:            2:33:18 PM
User:            N/A
Computer:      xxxxx
Description:
The Security System detected an attempted downgrade attack for server cifs/Acad.  The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request.
 (0xc000005e)".


Application:
1)

Event Type:      Error
Event Source:      AutoEnrollment
Event Category:      None
Event ID:      15
Date:            7/6/2004
Time:            2:04:46 PM
User:            N/A
Computer:      xxxxx
Description:
Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b).  The specified domain either does not exist or could not be contacted.
  Enrollment will not be performed.

2)

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1054
Date:            7/6/2004
Time:            2:03:40 PM
User:            NT AUTHORITY\SYSTEM
Computer:      xxxxx
Description:
Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted.



Currently, I have a DNS server that after reviewing a few other post on this site I realized that it does in fact have the DNS Server's IP within the Forward/Reverse.  Which does not seem to be correct .  Can I just delete the entry, or will it reappear?  Currently, I am "toying" with DNS her and there.  All nodes are set to ISP's DNS server.  But my DC and files server are in fact set to MY DNS server.  Might this be one of my issues?  I attempted to enable/disable the local security authorization on my XP box, BUT that proved to do nothing but restrict access to LAN even after logging on a few minutes earlier.  I am at the point of creating a dual boot for the/me XP users and installing Windows 2000 Professional back on there machines.  As I have had this issue now for quite awhile w/o any ability to resolve it.....hence my final attempt and posting here.

Thank's!

Answer : LAN access issues with XP, but not 2000....

Rereading the issue, I'm not convinced that it's a DNS issue since 90% of your clients are working fine.  If your DHCP or DNS were misconfigured, this probably wouldn't be the case.

Two things I can think of to do while I'm brainstorming this are:

1)  Make sure that yor XP boxes have all of the critical updates, and
2)  Try unjoining and rejoining to the domain.