Automatic certificate enrollment for local system failed after upgrading member server to domain controller

[Arch Willingham]

I am getting errors after upgrading a member sever running Windows 2003 to a
domain controller (via DCPROMO). Every five minutes, I get this error:

Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 13
Date: 08/25/2005
Time: 5:56:59 PM
User: N/A
Computer: DOG
Description:
Automatic certificate enrollment for local system failed to enroll for one
Domain Controller certificate (0x80070005). Access is denied.


Any ideas?

Arch

[Todd J Heron]

Probably a DNS misconfiguration. Is this server pointed to an internal DNS
server which supports your AD under TCP/IP properties?

--
Todd J Heron, MCSE
Windows Server 2003/2000/NT; CCA
----------------------------------------------------------------------------
This posting is provided "as is" with no warranties and confers no rights

"Arch Willingham" <nospam_arch@tuparks.com> wrote in message
news:OyvUS$0qFHA.3424@TK2MSFTNGP10.phx.gbl...
I am getting errors after upgrading a member sever running Windows 2003 to a
domain controller (via DCPROMO). Every five minutes, I get this error:

Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 13
Date: 08/25/2005
Time: 5:56:59 PM
User: N/A
Computer: DOG
Description:
Automatic certificate enrollment for local system failed to enroll for one
Domain Controller certificate (0x80070005). Access is denied.


Any ideas?

Arch

[Arch Willingham]

Yes...it is configured that way.

Arch

"Todd J Heron" <todd_heron_no_spam@hotmail.com> wrote in message
news:uwSICK1qFHA.2212@TK2MSFTNGP15.phx.gbl...
> Probably a DNS misconfiguration. Is this server pointed to an internal
> DNS
> server which supports your AD under TCP/IP properties?
>
> --
> Todd J Heron, MCSE
> Windows Server 2003/2000/NT; CCA
> ----------------------------------------------------------------------------
> This posting is provided "as is" with no warranties and confers no rights
>
> "Arch Willingham" <nospam_arch@tuparks.com> wrote in message
> news:OyvUS$0qFHA.3424@TK2MSFTNGP10.phx.gbl...
> I am getting errors after upgrading a member sever running Windows 2003 to
> a
> domain controller (via DCPROMO). Every five minutes, I get this error:
>
> Event Type: Error
> Event Source: AutoEnrollment
> Event Category: None
> Event ID: 13
> Date: 08/25/2005
> Time: 5:56:59 PM
> User: N/A
> Computer: DOG
> Description:
> Automatic certificate enrollment for local system failed to enroll for one
> Domain Controller certificate (0x80070005). Access is denied.
>
>
> Any ideas?
>
> Arch
>
>
>

[Todd J Heron]

"Arch Willingham" <nospam_arch@tuparks.com> wrote in message...
>Yes...it is configured that way.
>Arch

Start here. www.eventid.net

--
Todd J Heron, MCSE
Windows Server 2003/2000/NT; CCA
----------------------------------------------------------------------------
This posting is provided "as is" with no warranties and confers no rights

[Donavan]

Hi Arch,

I had the same problem. This worked for me ""Add the Domain Controller's
OU to the newly created CERTSVC_DCOM_ACCESS
domain group in Active Directory and restart the MSDTC service ". I found it
in a previous posting.

Regards

Donavan

"Todd J Heron" wrote:

> "Arch Willingham" <nospam_arch@tuparks.com> wrote in message...
> >Yes...it is configured that way.
> >Arch
>
> Start here. www.eventid.net
>
> --
> Todd J Heron, MCSE
> Windows Server 2003/2000/NT; CCA
> ----------------------------------------------------------------------------
> This posting is provided "as is" with no warranties and confers no rights
>
>