Re: Web Enrollment pages on another computer

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 05/01/04 

Date: Sat, 1 May 2004 07:26:42 -0700

is the machine account hosting the web pages joined to the domain (AD) and
trusted for delegation? 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Mariano" <xmarv@inwind.it> wrote in message
news:O8o%23HtdLEHA.2456@TK2MSFTNGP12.phx.gbl...
> Configuration
> -CA (enterprise CA) is installed on a pc (PC1) with Windows Server 2003
> Enterprise Edition (this computer is Domain Controller);
> -Web Enrollment Pages are installed on a host computer (PC2) member of
> domain;
>
> When I launch web enrollment pages from PC2 (http://localhost/certsrv) all
> works fine!
> when I launch web enrollment pages from PC3 (pc3 is not member of the
> domain) authenticating me with a domain account, I can navigate web pages
> but when I request a certificate the following error occurs:
>
>
> Your request failed. An error occurred while the server was processing
your
> request.
>
> Contact your administrator for further assistance.
>
> Request Mode:
> newreq - New Request
> Disposition:
> (never set)
> Disposition message:
> (none)
> Result:
> Access is denied. 0x80070005 (WIN32: 5)
> COM Error Info:
> CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5)
> LastStatus:
> The operation completed successfully. 0x0 (WIN32: 0)
> Suggested Cause:
> The Certification Authority Service has not been started.
>
>
> In event viewer (system) of PC2 there is:
>
> DCOM got error "General access denied error " from the computer
> computername.domainname when attempting to activate the server:
> {D99E6E74-FC88-11D0-B498-00A0C90312F3}
>
>
> Help me.
> Thanks.
>
> Mariano.
>
>

Relevant Pages