Re: Certificate Authority Deleted

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 05/30/05


Date: Mon, 30 May 2005 14:17:19 -0500

I have not actually had that problem myself but see the link below on how to
remove objects related to a CA from the domain. Since your CA is already
gone pay particular attention to steps number six and beyond to see if that
helps your problem. Also may sure that Group Policy for the domain/OU is
not configured for automatic request of computer certificates under computer
configuration/Windows settings/security settings/public key policies. ---
Steve

http://support.microsoft.com/?id=889250

"John" <John@discussions.microsoft.com> wrote in message
news:FD9B9425-D369-458B-9825-DCA8CE897927@microsoft.com...
> We have a Windows 2000 AD that is missing it's certificate authority.
> It was on a domain controller some time back and since then that DC has
> been
> removed but I beleive the CA was forgotten about. We have some errors on
> our
> other DCs, "Event ID 1010: Automatic enrollment against the certification
> authority ourdomain.com has failed....."
> Any idea on how to remove this "ghost CA" and any type of problems that it
> might cause?
> Thanks



Relevant Pages

  • Certificate Authority Deleted
    ... We have a Windows 2000 AD that is missing it's certificate authority. ... It was on a domain controller some time back and since then that DC has been ...
    (microsoft.public.win2000.security)
  • EFS and Domain Questions
    ... clients. ... I have done all the necessary steps on the domain controller ... to enable user and computer certificates. ... of them to be able to access an encrypted file. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: CA (certificate Authority) - Removing AD from box
    ... This is not the last domain controller in our environment. ... security NewsGroup. ... Move a certificate authority to a new server running on a domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: How do you move a certificate authority to a another domain contro
    ... Remove the kNOT to reply. ... I would like to retire the first domain controller that was ... > but the original machine is a certificate authority. ... > Andrew Buschbom ...
    (microsoft.public.win2000.general)
  • How do you move a certificate authority to a another domain contrl
    ... How do you move a certificate authority to a another domain controller on the ... I would like to retire the first domain controller that was ... I have moved all of the server roles and dns services ...
    (microsoft.public.win2000.security)