This problem still exists on the CertServer. All DC's are Windows 2003. What else could be done to resolve this? Would I have to uninstall CertSvc and reinstall again?
________________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric Sent: Thursday, November 10, 2005 4:14 PM To: [email protected] Subject: RE: [ActiveDir] CertSvc Error You'll also have to refresh the policy on the affected DCs (i.e. gpupdate.exe /force). Are all of the DCs W2K3? ________________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Thursday, November 10, 2005 12:19 PM To: [email protected] Subject: RE: [ActiveDir] CertSvc Error Hmm...I've enabled those settings and rebooted the CertSvc and am still getting these errors: Event Type: Warning Event Source: CertSvc Event Category: None Event ID: 53 Date: 11/10/2005 Time: 3:10:06 PM User: N/A Computer: SWSAD1 Description: Certificate Services denied request 1252 because The requested certificate template is not supported by this CA. 0x80094800 (-2146875392). The request was for SWSCA\SWSADCA5$. Additional information: Denied by Policy Module 0x80094800, The request was for a certificate template that is not supported by the Certificate Services policy: DomainController. ________________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric Sent: Thursday, November 10, 2005 2:56 PM To: [email protected] Subject: RE: [ActiveDir] CertSvc Error If I remember correctly you will want to enable both the renew and update features (below) to help resolve your issue. ________________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Thursday, November 10, 2005 10:51 AM To: [email protected] Subject: RE: [ActiveDir] CertSvc Error And this.... Public Key Policies/Autoenrollment Settingshide Policy Setting Enroll certificates automatically Enabled Renew expired certificates, update pending certificates, and remove revoked certificates Disabled Update certificates that use certificate templates Disabled ________________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric Sent: Thursday, November 10, 2005 12:31 PM To: [email protected] Subject: RE: [ActiveDir] CertSvc Error The "DomainController(v0.0): V1 Certificate Template" is not supported under Windows Server 2003. You may be specifying that your DCs autoenroll for this certificate via GPO. Check out your DDC GPO. The new policy they should be autoenrolling for is "Domain Controller Authentication". ________________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Thursday, November 10, 2005 9:11 AM To: [email protected] Subject: RE: [ActiveDir] CertSvc Error It was a Windows 2000 upgraded to Windows 2003 ________________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: Thursday, November 10, 2005 12:02 PM To: [email protected] Subject: RE: [ActiveDir] CertSvc Error Is your CA on Windows Server 2003 in a Windows 2000 domain? ________________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Thursday, November 10, 2005 11:44 AM To: [email protected] Subject: [ActiveDir] CertSvc Error I keep getting these errors on my root domain controller and any new DC's added are not being issued certificates. Event Type: Warning Event Source: CertSvc Event Category: None Event ID: 77 Date: 11/10/2005 Time: 3:00:36 AM User: N/A Computer: SWSAD1 Description: The "Windows default" Policy Module logged the following warning: The DomainController(v0.0): V1 Certificate Template could not be loaded. Element not found. 0x80070490 (WIN32: 1168). Event Type: Warning Event Source: CertSvc Event Category: None Event ID: 53 Date: 11/10/2005 Time: 3:00:36 AM User: N/A Computer: SWSAD1 Description: Certificate Services denied request 1242 because The requested certificate template is not supported by this CA. 0x80094800 (-2146875392). The request was for SWSGS\BSGAD1$. Additional information: Denied by Policy Module 0x80094800, The request was for a certificate template that is not supported by the Certificate Services policy: DomainController. I looked at the following MS article but saw no resolution. http://support.microsoft.com/default.aspx?scid=kb;en-us;283218 Devon Harding Windows Systems Engineer Southern Wine & Spirits - BSG 954-602-2469 ________________________________________ __________________________________ This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank You. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
