A few questions: 1. The Enterprise CA is running on 2003 Sp1 - is this 2003 Standard or Enterprise editions OS? 2. When you open the MMC for cert templates - do you see the templates available? 3. If you run this cmd: "certutil -template" what is the output? 4. If you run "certutil -config <CAServerName>\<CAName> -CAtemplates" what is the output? 5. run "certutil -templateCAs Administrator"
steve ----- Original Message ----- From: "Donavon Yelton" <[EMAIL PROTECTED]> To: <ActiveDir@mail.activedir.org> Sent: Tuesday, June 21, 2005 4:34 AM Subject: [ActiveDir] The Administrator Certificate Template could not be loaded. Element not found. I have two domain controllers. Our primary is Windows 2003SP1 and the other is Windows 2000SP4. All primary roles, FSMO, etc. are on the 2003 DC. Our Enterprise CA is on our Exchange 2003SP1 server running Windows 2003SP1. My problem is that I'm now logging event ID 77 warnings from CertSvc in the event log. Here is an example: " The "Windows default" Policy Module logged the following warning: The Administrator Certificate Template could not be loaded. Element not found. 0x80070490 (WIN32: 1168). " Microsoft has a KB article but has no information on this other than the error itself: http://support.microsoft.com/default.aspx?scid=kb;en-us;283218 I'm at a loss of what to do as there seems to be little to no information on the web on how to remedy this problem. If I open up the the CA MMC on the CA server it shows my primary domain controller as failing to obtain a certificate. Reason given is "The requested certificate template is not supported by this CA. 0x80094800(-2146875392)." This is causing (I'm assuming) a problem where the Exchange server can no longer obtain information from the DC and prevents users from opening their exchange account. If I manually request an Administrative certificate on the DC it tells me that my certificate request was denied. Any help would be appreciated. Donavon Yelton List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
