Re: several annoying error message in all the domain controllers

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Ryan Hanisco (rhanisco_at_flagshipis.com)
Date: 02/16/05 

Date: Tue, 15 Feb 2005 22:59:42 -0600

This looks like a problem with the auto enrollment of the DCs with your
certificate authority. Take a look to ensure that the CD you have set up is
available to all of the DCs.

I have never seen this error in a situation where there was not an Active
Directory Integrated Root CA. Is this the case... or was it the case at one
time?? If you installed it by accident and then pulled it, I could see this
happening. 

-- 
Ryan Hanisco
MCSE, MCDBA
FlagShip Integration Services
"Ed" <Ed@discussions.microsoft.com> wrote in message 
news:23663C29-B007-4146-95A1-A294B80E2430@microsoft.com...
> Our Windows 2003 Native domain controllers are getting several ANNOYING 
> error
> messages every 5 minutes or so in the app log.  I have exhausted Google
> search, Microsoft KBase, and even EventID.net and i cannot figure this 
> out.
> They are filling up the logs and I'm sick of seeing them.
> Environment:
> 10 Windows 2003 Native DCs
> 1 root forest domain and 4 child domains
>
> ***********************************************************
> Type: Error
> User: N/A
> Computer: SERVER1
> Source: Autoenrollment
> Event ID: 13
> Description:  Automatic certificate enrollment for local system failed to
> enroll for one Domain Controller certificate (0x800706ba).  The RPC server 
> is
> unavailable.
> ***********************************************************
>
>
> ***********************************************************
> Type: Warning
> User: N/A
> Computer: SERVER1
> Source: SceCli
> Event ID: 1202
> Security policies were propagated with warning. 0xd : The data is invalid.
>
> Advanced help for this problem is available on 
> http://support.microsoft.com.
> Query for "troubleshooting 1202 events".
> ***********************************************************
>
> These errors happen one right after the other every 5 minutes.  Someone
> please help me!
>
> Thanks
>

Relevant Pages

  • Re: Microsoft PKI Problem with Domain Controllers (Autoenrollment)
    ... I have the following problem on my AD-Domain (3 Domain Controllers ... "Automatic Certificate Enrollment for local system could not find a ... the group policy automatic enrollment object. ... The "DomainController" template is the standard template, ...
    (microsoft.public.windows.server.sbs)
  • Microsoft PKI problem with domain controllers (autoenrollment)
    ... I have the following problem on my AD-Domain (3 Domain Controllers ... "Automatic Certificate Enrollment for local system could not find a ... the group policy automatic enrollment object. ... The "DomainController" template is the standard template, ...
    (microsoft.public.security)
  • Microsoft PKI: problem with autoenrollment for domain controllers
    ... I have the following problem on my AD-Domain (3 Domain Controllers ... "Automatic Certificate Enrollment for local system could not find a ... the group policy automatic enrollment object. ... The "DomainController" template is the standard template, ...
    (microsoft.public.windows.server.security)
  • Microsoft PKI Problem with Domain Controllers (Autoenrollment)
    ... I have the following problem on my AD-Domain (3 Domain Controllers ... "Automatic Certificate Enrollment for local system could not find a ... the group policy automatic enrollment object. ... The "DomainController" template is the standard template, ...
    (microsoft.public.windows.server.sbs)
  • Re: Wireless WPA on SBS not authenticating
    ... Automatic certificate enrollment for local system failed to contact the ... Enrollment will not be performed. ... certificate then tested on wireless. ... client PC or the router. ...
    (microsoft.public.windows.server.sbs)