Re: RPC Server Unavailable When Requesting Computer Certificate

From: Ben (bjblackmore_at_hotmail.com)
Date: 09/21/05 

Date: Wed, 21 Sep 2005 09:53:11 +0100

Hi Ozone,

Thanks for the reply, I will give the end user a call and give this a try
over emote assistance! Thanks for the advice!

Ben

"Ozone" <Ozone@discussions.microsoft.com> wrote in message
news:9A8AB0C9-8A91-4797-B24E-8548232C452D@microsoft.com...
> The one thing that I would do it to start Netmon on both ends and run them
> while making the request for the cert. you should see one of them come
> back
> with a Port access issue. With this info, you will know what you need to
> do
> on the firewall for RPC to work and allow for the cert request to work
> properly...
>
> "Ben" wrote:
>
>> Hi,
>>
>> I'm trying to set up a machine for use with our VPN. We will be using
>> L2TP &
>> smartcards, so I need to request a computer certificate. Up till now I've
>> been able to configure most computer when people are in the office,
>> connected to the domain, using automatic certificate deployment via group
>> policy. However we have 1 user who is not going to be in the office, but
>> needs VPN access.
>>
>> So I've changed the VPN access to allow PPTP temporarily, and asked him
>> to
>> connect, then I've used remote assistance to terminal service into his
>> machine. From there I've managed to use the web based enrollment to
>> download
>> the CA certificate, and tried to use the certificates MMC snap in to
>> request
>> a computer certificate. However I get the initial screen up, asking which
>> certificate I'd like, common name etc, but when I press finish, the
>> system
>> hangs for about 10 seconds, then errors with "RPC Server is unavailable".
>>
>> At first I thought this might be a firewall issue, as he was running
>> windows
>> firewall, as well as Symantec firewall. So I disabled both, and also the
>> firewall on his 3com router. However after trying again, with a number of
>> reboots, it still errors. I can ping the CA, the domain, and other
>> computers.
>>
>> Does anyone have any ideas as to how I can successfully request a
>> computer
>> certificate? Is there another way of doing it? I notice there is no
>> computer
>> certificate option in the web enrollment form, even though the template
>> has
>> been added to the CA.
>>
>> We're using ISA 2004 as the VPN server, and it's allowing all protocols
>> through from VPN > internal, and Internal > VPN. The DC is windows 2003
>> server, and the client machine is Windows XP pro SP2.
>>
>> Many thanks
>>
>> Ben
>>
>>
>>

Relevant Pages