RE: [ActiveDir] CertSvc Error **RESOLVED**

[Bernier, Brandon \(.\)]

you should be able to. I believe it only restores the CA database and since the templates are published in AD, they should be left alone. But, I've never done this so please triple guess me. -Brandon From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Friday, November 11, 2005 3:19 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] CertSvc Error **RESOLVED** When I logged on to the CertServ as a Domain Admin in my child domain and ran certtmpl.msc, it said I needed to be a Domain Admin and Enterprise Admin to publish new templates.  I was an Enterprise Admin, but not a part of the Domain Admins group in the root domain.  I then Logged on as a Domain Admin/Enterprise Admin in the root domain and ran the command which then prompted me to Upgrade the templates.  No more errors.   Now the question is this, can I now restore my CA backup or will this cause a problem?   Thanks all!!!   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernier, Brandon (.) Sent: Friday, November 11, 2005 2:41 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] CertSvc Error   besides uninstalling the CA and going through all the issues around that, why don't you blow away the templetes? If you run certtmpl.msc after it will ask "This is the first time you have opened Certificate Templetes, would you like to publish them in Active Directory?"  say yes and then you get fresh templates. Then just pick your template and republish it. This doesn't have a horrible effect unless everything is re-autoenrolling at the time you do this.    btw what kind of templates do you have published?   -brandon     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Friday, November 11, 2005 2:17 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] CertSvc Error Well all the CA’s were backed up before the uninstall.  And no this did not resolve the issue.  When the service is restarted, it states that none of the policies could be loaded; one Event ID 77 warning for each template, like so:   Event Type:       Warning Event Source:    CertSvc Event Category: None Event ID:           77 Date:                11/11/2005 Time:                10:46:04 AM User:                N/A Computer:         SWSAD1 Description: The "Windows default" Policy Module logged the following warning: The EFSRecovery(v2.0): V1 Certificate Template could not be loaded.  Element not found. 0x80070490 (WIN32: 1168).     For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric Sent: Friday, November 11, 2005 11:49 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] CertSvc Error   Was this an upgrade from W2K?   What error messages are you receiving on the DC? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, November 11, 2005 8:43 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] CertSvc Error   True if running in production -- thanks on the feedback of not needing to do a reinstall ...   Chuck   __________________________________ This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank You.