Your Windows 2000 domain controller stops authenticating users and you see LsaSrv event 5000 in Event Viewer (831726)

SYMPTOMS

A Microsoft Windows 2000-based domain controller may stop authenticating users until it is restarted. When you open Event Viewer, you may see an event that is similar to the following:Event Type: Error
Event Source: LsaSrv
Event Category: Devices
Event ID: 5000
User: N/A
Computer: ComputerName
Description: The security package Negotiate generated an exception. The package is now disabled. The exception information is the data.
Data:
0000: c0000005 00000000 00000000 78566df3
0010: 00000002 00000000 0000000c 0001003f
0020: 00000000 00000000 00000000 00000000
0030: 00000000 00000000 ffff027f ffff0020
0040: ffffffff 70181b1a 06d9001b 70173910

RESOLUTION

To resolve this problem, follow the instructions in the "Resolution" section of the following article:

829755 The Active Directory DIT file grows too fast

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section of this article.

MORE INFORMATION

For additional information about how hotfix packages are named, click the following article number to view the article in the Microsoft Knowledge Base:

816915 New Naming Schema for Microsoft Windows Hotfix Packages

For additional information about the terminology that is used in this article, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the Standard Terminology That Is Used to Describe Microsoft Product Updates, Tools, and Add-ons