Re: AutoEnrollment
- From: Paul Adare <padare@xxxxxxxxxxx>
- Date: Wed, 7 Jun 2006 04:06:49 -0700
In article <344C9241-DA1F-46D8-89AE-68AD7A34E757@xxxxxxxxxxxxx>, in the
microsoft.public.security news group, =?Utf-8?B?U2hhd24gSGF5ZXM=?=
<ShawnHayes@xxxxxxxxxxxxxxxxxxxxxxxxx> says...
We have a W2K3 SP1 Enterprise Root CA and a GPO established for Computer
account AutoEnrollment. The computers are not receiving Certificates and the
error message in the Eventlog reads
Soure:AutoEnrollment
EventID: 13
Automatic certificate enrollment for local system failed to enroll for one
Computer (Autoenrollment) certificate (0x80070005), Access is Denied.
I have verified permissions on the \Documents and Settings\All
Users\Application Data\Microsoft\Crypto\RSA\MachineKeys directory include
Administrator and System Full contol.
Thanks in advance for any suggestions.
What SKU of Windows Server 2003 is your CA running, Web, Standard,
Enterprise or Data Centre? For autoenrollment you need to be running
Enterprise Edition or above.
--
Paul Adare - MVP Virtual Machines
It all began with Adam. He was the first man to tell a joke--or a lie.
How lucky Adam was. He knew when he said a good thing, nobody had said
it before. Adam was not alone in the Garden of Eden, however, and does
not deserve all the credit; much is due to Eve, the first woman, and
Satan, the first consultant." - Mark Twain
.
- Prev by Date: Re: Local Admin Password Change Scripting
- Next by Date: Re: How can I get rid of this security message?
- Previous by thread: Mini page on desktop
- Next by thread: Re: AutoEnrollment
- Index(es):
Relevant Pages
|