I have a server running Windows Server 2008 R2 which I use as a Remote Desktop Server. Following a reboot the System event logs are full of the following entries "The following fatal alert was received: 40" and "The following fatal
alert was received: 70".
I have rebooted again but this hasn't cleared the issue. The server is fully patched.
I have noticed that it coincides with users logging on and logging off.
The Schannel 36887 errors come in a long burst of events preceded by three events.
Source: Service Control Manager
Event ID: 7036
Description: The Portable Device Enumerator Service service entered the running state.
Source: Microsoft-Windows-Winlogon
Event ID: 7001
Description: User Logon Notification for Customer Experience Improvement Program
Source: LsaSrv
Event ID: 45058
Description: A logon cache entry for user *UserName*@mydomain.LOCAL was the oldest entry and was removed. The timestamp of this entry was...
Can anybody suggest what is causing this?
Kind regards
David