This is definitely an "upgradeable" component.
Can you gather the following data:
certutil -dstemplate > dstemplate.txt
certutil -ds > ds.txt
And make them available ( or email them to me )
thanks
steve
----- Original Message -----
From: "Harding, Devon" <[EMAIL PROTECTED]>
To: <ActiveDir@mail.activedir.org>
Sent: Friday, November 11, 2005 6:49 AM
Subject: RE: [ActiveDir] CertSvc Error
This problem still exists on the CertServer. All DC's are Windows 2003.
What else could be done to resolve this? Would I have to uninstall CertSvc
and reinstall again?
________________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric
Sent: Thursday, November 10, 2005 4:14 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] CertSvc Error
You'll also have to refresh the policy on the affected DCs (i.e.
gpupdate.exe /force). Are all of the DCs W2K3?
________________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon
Sent: Thursday, November 10, 2005 12:19 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] CertSvc Error
Hmm...I've enabled those settings and rebooted the CertSvc and am still
getting these errors:
Event Type: Warning
Event Source: CertSvc
Event Category: None
Event ID: 53
Date: 11/10/2005
Time: 3:10:06 PM
User: N/A
Computer: SWSAD1
Description:
Certificate Services denied request 1252 because The requested certificate
template is not supported by this CA. 0x80094800 (-2146875392). The request
was for SWSCA\SWSADCA5$. Additional information: Denied by Policy Module
0x80094800, The request was for a certificate template that is not supported
by the Certificate Services policy: DomainController.
________________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric
Sent: Thursday, November 10, 2005 2:56 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] CertSvc Error
If I remember correctly you will want to enable both the renew and update
features (below) to help resolve your issue.
________________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon
Sent: Thursday, November 10, 2005 10:51 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] CertSvc Error
And this....
Public Key Policies/Autoenrollment Settingshide
Policy
Setting
Enroll certificates automatically
Enabled
Renew expired certificates, update pending certificates, and remove revoked
certificates
Disabled
Update certificates that use certificate templates
Disabled
________________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric
Sent: Thursday, November 10, 2005 12:31 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] CertSvc Error
The "DomainController(v0.0): V1 Certificate Template" is not supported under
Windows Server 2003. You may be specifying that your DCs autoenroll for this
certificate via GPO. Check out your DDC GPO. The new policy they should be
autoenrolling for is "Domain Controller Authentication".
________________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon
Sent: Thursday, November 10, 2005 9:11 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] CertSvc Error
It was a Windows 2000 upgraded to Windows 2003
________________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith
Sent: Thursday, November 10, 2005 12:02 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] CertSvc Error
Is your CA on Windows Server 2003 in a Windows 2000 domain?
________________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon
Sent: Thursday, November 10, 2005 11:44 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] CertSvc Error
I keep getting these errors on my root domain controller and any new DC's
added are not being issued certificates.
Event Type: Warning
Event Source: CertSvc
Event Category: None
Event ID: 77
Date: 11/10/2005
Time: 3:00:36 AM
User: N/A
Computer: SWSAD1
Description:
The "Windows default" Policy Module logged the following warning: The
DomainController(v0.0): V1 Certificate Template could not be loaded. Element
not found. 0x80070490 (WIN32: 1168).
Event Type: Warning
Event Source: CertSvc
Event Category: None
Event ID: 53
Date: 11/10/2005
Time: 3:00:36 AM
User: N/A
Computer: SWSAD1
Description:
Certificate Services denied request 1242 because The requested certificate
template is not supported by this CA. 0x80094800 (-2146875392). The request
was for SWSGS\BSGAD1$. Additional information: Denied by Policy Module
0x80094800, The request was for a certificate template that is not supported
by the Certificate Services policy: DomainController.
I looked at the following MS article but saw no resolution.
http://support.microsoft.com/default.aspx?scid=kb;en-us;283218
Devon Harding
Windows Systems Engineer
Southern Wine & Spirits - BSG
954-602-2469
________________________________________
__________________________________
This message and any attachments are solely for the intended recipient
and may contain confidential or privileged information. If you are not
the intended recipient, any disclosure, copying, use or distribution of
the information included in the message and any attachments is
prohibited. If you have received this communication in error, please
notify us by reply e-mail and immediately and permanently delete this
message and any attachments. Thank You.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
