I've been keeping my ModuleAdministration page open to monitor a new WebConnect installation.
A few times this morning at 6 AM, I have the following in wcErrors:
2023-01-08 00:06:04.115 - 9_b1c64ddd - **Unhandled Exception (Mainline): The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation.**
at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection sourceSids, Boolean& someFailed)
at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean& someFailed)
at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)
at System.Security.Principal.SecurityIdentifier.Translate(Type targetType)
at System.Security.Principal.WindowsIdentity.GetName()
at System.Security.Principal.WindowsIdentity.get_Name()
at Westwind.WebConnection.WebConnectionHandler.IsAdminAuthenticated()
at Westwind.WebConnection.WebConnectionHandler.AuthenticateAdmin()
at Westwind.WebConnection.WebConnectionHandler.HandleAdminTasks()
at Westwind.WebConnection.WebConnectionHandler.ProcessRequest(HttpContext context) - /admin/ShowServerList.wc?1673157963420
Any tips regarding where I can look for the cause? The Module Administration seems to be updating properly - should I be concerned?
TIA
![](https://weblog.west-wind.com/images/Sponsors/Websurge-Display.png)
Perhaps it's a timeout for the WC admin authentication login?
That looks like some sort of Windows Security issue. It looks like corrupted security data - most likely somebody sending an invalid Windows Auth header or something along those lines.
It's not great that this happens, but also not a problem in that the login check fails and access to this page is denied. Not great because Windows should be able to handle this without a crashing exception - the value should just be blank.
+++ Rick ---