Error 36888 Schannel
An
error
is occurring
on the servers
Windows 2008 R2 Enterprise with IIS 7.0 Site hosted with SSL/Certificate
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
<EventID>36888</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-01-25T11:21:19.198625000Z" />
<EventRecordID>42969</EventRecordID>
<Correlation />
<Execution ProcessID="484" ThreadID="532" />
<Channel>System</Channel>
<Computer>b1153120.rio.rj.gov.br</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="AlertDesc">10</Data>
<Data Name="ErrorState">1203</Data>
</EventData>
</Event>
January 26th, 2011 6:49am
check this link this should help you
http://social.technet.microsoft.com/Forums/en/winserverDS/thread/4c5430f5-43f6-41b4-97d3-03cfb3efa70bhttp://www.virmansec.com/blogs/skhairuddin
Free Windows Admin Tool Kit Click here and download it now
January 26th, 2011 6:56am
Before
opening
the topic
checked the
link.
Another
suggestion ?
January 26th, 2011 7:10am
Hi,
The event ID 36888 is usually due to a user tries to access a web site using HTTP but specifies an SSL port in the URL. For example, http://hostname or https://hostname.
If some user access the website with the URL http://hostname:443, then this event will be logged. You can check the Schannel tracing log to confirm such scenario.
If no issue is found, you can simply disable this Schannel event logging by changing the following registry value to 0.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\EventLogging
For more information, please refer to the following link:
http://support.microsoft.com/kb/260729
Thanks.
NinaThis posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
January 30th, 2011 10:36pm


