SChannel EventID 36887 caused by lsass.exe

[dhoward_westexetc]

I have a new, unknown error to me on our 2008 R2 DC.

 

We have started getting continuous SChannel errors on it, event ID 36887 alert 48.

 

From looking at the event logs they are being generated by lsass.exe, the Security accounts manager service. They happen between every 10 and 70 seconds.

 

Does anyone know why they are being generated and what the fix for it is?

 

It does not seem to be bringing our network down but I am just perplexed that they have suddenly started happening.

 

One other note, we do not use SSL on our exchange 2007 client access server.