Re: AutoEnrollment



In article <344C9241-DA1F-46D8-89AE-68AD7A34E757@xxxxxxxxxxxxx>, in the
microsoft.public.security news group, =?Utf-8?B?U2hhd24gSGF5ZXM=?=
<ShawnHayes@xxxxxxxxxxxxxxxxxxxxxxxxx> says...

We have a W2K3 SP1 Enterprise Root CA and a GPO established for Computer
account AutoEnrollment. The computers are not receiving Certificates and the
error message in the Eventlog reads

Soure:AutoEnrollment
EventID: 13

Automatic certificate enrollment for local system failed to enroll for one
Computer (Autoenrollment) certificate (0x80070005), Access is Denied.

I have verified permissions on the \Documents and Settings\All
Users\Application Data\Microsoft\Crypto\RSA\MachineKeys directory include
Administrator and System Full contol.

Thanks in advance for any suggestions.


What SKU of Windows Server 2003 is your CA running, Web, Standard,
Enterprise or Data Centre? For autoenrollment you need to be running
Enterprise Edition or above.

--
Paul Adare - MVP Virtual Machines
It all began with Adam. He was the first man to tell a joke--or a lie.
How lucky Adam was. He knew when he said a good thing, nobody had said
it before. Adam was not alone in the Garden of Eden, however, and does
not deserve all the credit; much is due to Eve, the first woman, and
Satan, the first consultant." - Mark Twain
.



Relevant Pages

  • Re: Autoenrollment error
    ... Event Source: AutoEnrollment ... Automatic certificate enrollment for local system successfully ... The only change I made was to make the Domain Controller group to the ...
    (microsoft.public.windows.server.active_directory)
  • Question on autoenrollment process with revoked certificate.
    ... I have an issue on autoenrollment which I need ... If I revoke one such certificate using the MMC snap-in, ... at the backend and gets refreshed in the revoked certificate area of the ...
    (microsoft.public.security)
  • Question on autoenrollment process with revoked certificate
    ... I have an issue on autoenrollment which I need ... If I revoke one such certificate using the MMC snap-in, ... at the backend and gets refreshed in the revoked certificate area of the ...
    (microsoft.public.security)
  • Question on autoenrollment process with revoked certificate.
    ... I have an issue on autoenrollment which I need ... If I revoke one such certificate using the MMC snap-in, ... at the backend and gets refreshed in the revoked certificate area of the ...
    (microsoft.public.win2000.security)
  • RE: AutoEnrollment Error Event 13
    ... "Automatic certificate enrollment for local system failed to enroll for one ... Domain Controller certificate. ... require you to reinstall Microsoft Windows 2000 Server, ... Server 2003, Microsoft Exchange 2000 Server, Microsoft Exchange Server ...
    (microsoft.public.windows.server.sbs)

Quantcast