Also, under ‘Default Domain Policy’
I also have these settings…
Public Key Policies/Encrypting
File Systemhide
Propertieshide
|
Policy |
Setting |
|
Allow users to encrypt files using
Encrypting File System (EFS) |
Enabled |
Public Key
Policies/Trusted Root Certification Authoritieshide
Propertieshide
|
Policy |
Setting |
|
Allow users to select new root
certification authorities (CAs) to trust |
Enabled |
|
Client computers can trust the
following certificate stores |
Third-Party Root Certification
Authorities and |
|
To perform certificate-based
authentication of users and computers, CAs must meet the following criteria |
Registered in Active Directory only |
Certificateshide
|
Issued To |
Issued By |
Expiration Date |
Intended Purposes |
|
SWSAD1Cert |
SWSAD1Cert |
3/19/2005 4:38:40 PM |
<All> |
For additional information about individual settings, launch Group Policy
Object Editor.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric
Sent: Thursday, November 10, 2005
12:31 PM
To: [email protected]
Subject: RE: [ActiveDir] CertSvc
Error
The “DomainController(v0.0):
V1 Certificate Template” is not
supported under Windows Server 2003. You may be specifying that your DCs autoenroll
for this certificate via GPO. Check out your DDC GPO. The new
policy they should be autoenrolling for is “Domain Controller
Authentication”.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Sent: Thursday, November 10, 2005
9:11 AM
To:
Subject: RE: [ActiveDir] CertSvc
Error
It was a Windows 2000
upgraded to Windows 2003
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Michael B. Smith
Sent: Thursday, November 10, 2005
12:02 PM
To:
Subject: RE: [ActiveDir] CertSvc
Error
Is your
CA on Windows Server 2003 in a Windows 2000 domain?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Sent: Thursday, November 10, 2005
11:44 AM
To:
Subject: [ActiveDir] CertSvc Error
I keep getting these errors on my
root domain controller and any new DC’s added are not being issued
certificates.
Event
Type: Warning
Event Source:
CertSvc
Event Category: None
Event
ID: 77
Date:
11/10/2005
Time:
3:00:36 AM
User:
N/A
Computer:
SWSAD1
Description:
The "Windows default"
Policy Module logged the following warning: The DomainController(v0.0): V1
Certificate Template could not be loaded. Element not found. 0x80070490
(WIN32: 1168).
Event
Type: Warning
Event Source:
CertSvc
Event Category: None
Event
ID: 53
Date:
11/10/2005
Time:
3:00:36 AM
User:
N/A
Computer:
SWSAD1
Description:
Certificate Services denied request
1242 because The requested certificate template is not supported by this CA.
0x80094800 (-2146875392). The request was for SWSGS\BSGAD1$.
Additional information: Denied by Policy Module 0x80094800, The request
was for a certificate template that is not supported by the Certificate
Services policy: DomainController.
I looked at the following MS article
but saw no resolution. http://support.microsoft.com/default.aspx?scid=kb;en-us;283218
Windows
Systems Engineer
Southern
Wine & Spirits - BSG
954-602-2469
__________________________________
This message and any attachments are
solely for the intended recipient
and may contain confidential or
privileged information. If you are not
the intended recipient, any disclosure,
copying, use or distribution of
the information included in the message
and any attachments is
prohibited. If you have received this
communication in error, please
notify us by reply e-mail and
immediately and permanently delete this
message and any attachments. Thank You.
__________________________________
This message and any attachments are solely for the intended recipient
and may contain confidential or privileged information. If you are not
the intended recipient, any disclosure, copying, use or distribution of
the information included in the message and any attachments is
prohibited. If you have received this communication in error, please
notify us by reply e-mail and immediately and permanently delete this
message and any attachments. Thank You.
