1. 2003 Standard 2. Templates are available. The only one failing is the issue to the DC 3.
Administrator: Administrator CA: Root Certification Authority CEPEncryption: CEP Encryption ClientAuth: Authenticated Session CodeSigning: Code Signing CTLSigning: Trust List Signing DomainController: Domain Controller EFS: Basic EFS EFSRecovery: EFS Recovery Agent EnrollmentAgent: Enrollment Agent EnrollmentAgentOffline: Exchange Enrollment Agent ( ExchangeUser: Exchange User ExchangeUserSignature: Exchange Signature Only IPSECIntermediateOffline: IPSec (Offline request) IPSECIntermediateOnline: IPSec Machine: Computer MachineEnrollmentAgent: Enrollment Agent (Computer) OfflineRouter: Router (Offline request) SmartcardLogon: Smartcard Logon SmartcardUser: Smartcard User SubCA: Subordinate Certification Authority User: User UserSignature: User Signature Only WebServer: Web Server CertUtil: -Template command completed successfully. 4. er.com -CAtemplates IPSECIntermediateOnline: IPSec EFSRecovery: EFS Recovery Agent EFS: Basic EFS DomainController: Domain Controller WebServer: Web Server Machine: Computer User: User SubCA: Subordinate Certification Authority Administrator: Administrator CertUtil: -CATemplates command completed successfully. 5. sydney.carpenter.local\mail.dennis-carpenter.com CertUtil: -TemplateCAs command completed successfully. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Patrick Sent: Tuesday, June 21, 2005 1:02 PM To: [email protected] Subject: Re: [ActiveDir] The Administrator Certificate Template could not be loaded. Element not found. A few questions: 1. The Enterprise CA is running on 2003 Sp1 - is this 2003 Standard or Enterprise editions OS? 2. When you open the MMC for cert templates - do you see the templates available? 3. If you run this cmd: "certutil -template" what is the output? 4. If you run "certutil -config <CAServerName>\<CAName> -CAtemplates" what is the output? 5. run "certutil -templateCAs Administrator" steve ----- Original Message ----- From: "Donavon Yelton" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Tuesday, June 21, 2005 4:34 AM Subject: [ActiveDir] The Administrator Certificate Template could not be loaded. Element not found. I have two domain controllers. Our primary is Windows 2003SP1 and the other is Windows 2000SP4. All primary roles, FSMO, etc. are on the 2003 DC. Our Enterprise CA is on our Exchange 2003SP1 server running Windows 2003SP1. My problem is that I'm now logging event ID 77 warnings from CertSvc in the event log. Here is an example: " The "Windows default" Policy Module logged the following warning: The Administrator Certificate Template could not be loaded. Element not found. 0x80070490 (WIN32: 1168). " Microsoft has a KB article but has no information on this other than the error itself: http://support.microsoft.com/default.aspx?scid=kb;en-us;283218 I'm at a loss of what to do as there seems to be little to no information on the web on how to remedy this problem. If I open up the the CA MMC on the CA server it shows my primary domain controller as failing to obtain a certificate. Reason given is "The requested certificate template is not supported by this CA. 0x80094800(-2146875392)." This is causing (I'm assuming) a problem where the Exchange server can no longer obtain information from the DC and prevents users from opening their exchange account. If I manually request an Administrative certificate on the DC it tells me that my certificate request was denied. Any help would be appreciated. Donavon Yelton List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
