RE: [ActiveDir] CertSvc Error

[Bernard, Aric]

You’ll also have to refresh the policy on the affected DCs (i.e. gpupdate.exe /force).  Are all of the DCs W2K3?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Thursday, November 10, 2005 12:19 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] CertSvc Error   Hmm…I’ve enabled those settings and rebooted the CertSvc and am still getting these errors:   Event Type:       Warning Event Source:    CertSvc Event Category: None Event ID:           53 Date:                11/10/2005 Time:                3:10:06 PM User:                N/A Computer:         SWSAD1 Description: Certificate Services denied request 1252 because The requested certificate template is not supported by this CA. 0x80094800 (-2146875392).  The request was for SWSCA\SWSADCA5$.  Additional information: Denied by Policy Module  0x80094800, The request was for a certificate template that is not supported by the Certificate Services policy: DomainController.     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric Sent: Thursday, November 10, 2005 2:56 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] CertSvc Error   If I remember correctly you will want to enable both the renew and update features (below) to help resolve your issue.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Thursday, November 10, 2005 10:51 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] CertSvc Error   And this….   Public Key Policies/Autoenrollment Settingshide Policy Setting Enroll certificates automatically Enabled Renew expired certificates, update pending certificates, and remove revoked certificates Disabled Update certificates that use certificate templates Disabled     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric Sent: Thursday, November 10, 2005 12:31 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] CertSvc Error   The “DomainController(v0.0): V1 Certificate Template” is not supported under Windows Server 2003.  You may be specifying that your DCs autoenroll for this certificate via GPO.  Check out your DDC GPO.  The new policy they should be autoenrolling for is “Domain Controller Authentication”.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Thursday, November 10, 2005 9:11 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] CertSvc Error   It was a Windows 2000 upgraded to Windows 2003   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: Thursday, November 10, 2005 12:02 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] CertSvc Error   Is your CA on Windows Server 2003 in a Windows 2000 domain?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Thursday, November 10, 2005 11:44 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] CertSvc Error I keep getting these errors on my root domain controller and any new DC’s added are not being issued certificates.   Event Type:       Warning Event Source:    CertSvc Event Category: None Event ID:           77 Date:                11/10/2005 Time:                3:00:36 AM User:                N/A Computer:         SWSAD1 Description: The "Windows default" Policy Module logged the following warning: The DomainController(v0.0): V1 Certificate Template could not be loaded.  Element not found. 0x80070490 (WIN32: 1168).   Event Type:       Warning Event Source:    CertSvc Event Category: None Event ID:           53 Date:                11/10/2005 Time:                3:00:36 AM User:                N/A Computer:         SWSAD1 Description: Certificate Services denied request 1242 because The requested certificate template is not supported by this CA. 0x80094800 (-2146875392).  The request was for SWSGS\BSGAD1$.  Additional information: Denied by Policy Module  0x80094800, The request was for a certificate template that is not supported by the Certificate Services policy: DomainController.   I looked at the following MS article but saw no resolution. http://support.microsoft.com/default.aspx?scid=kb;en-us;283218   Devon Harding Windows Systems Engineer Southern Wine & Spirits - BSG 954-602-2469   __________________________________ This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank You.