Autoenrollment error

From: Matthew Clark <MD-Clark@xxxxxxxxxxxxxx>
Date: Thu, 02 Feb 2006 11:52:01 -0600

I posted this in General with no response so I thought I might try here as well...

I have a 2003 server that keeps getting the error -

Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 13
Date: 2/1/2006
Time: 11:28:51 AM
User: N/A
Computer: xxxxxxx
Description:
Automatic certificate enrollment for local system failed to enroll for one
Domain Controller certificate (0x80070005). Access is denied.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

I read in a couple places to try "certutil -setreg SetupStatus
-SETUP_DCOM_SECURITY_UPDATED_FLAG". I tried that and it produced the error -

CertUtil: -setreg command FAILED: 0x80070002 (WIN32: 2)
CertUtil: The system cannot find the file specified.

Does anyone have a suggestion on where to go from here?

Thanks!
.

Follow-Ups:
- Re: Autoenrollment error
  - From: Matthew Clark
- RE: Autoenrollment error
  - From: Tom Che [MSFT]
- Re: Autoenrollment error
  - From: Cary Shultz

Prev by Date: Re: Promoting 2003 R2 server in existing 2003 domain fails
Next by Date: Re: Problems with AdminCount bit, inheiratance, and email
Previous by thread: Process to replace 2000 DC's with 2003.
Next by thread: Re: Autoenrollment error
Index(es):
- Date
- Thread

Relevant Pages

Re: Autoenrollment error
... I have a 2003 server that keeps getting the error - ... Event Type: Error ... Automatic certificate enrollment for local system failed to enroll for one ... I read in a couple places to try "certutil -setreg SetupStatus ...
(microsoft.public.windows.server.active_directory)
Events 15, 40961, 40960 & 5719
... Automatic certificate enrollment for local system failed to contact the ... active directory. ... The Security System could not establish a secured connection with the server ... No authentication protocol was available. ...
(microsoft.public.windowsxp.general)
Re: Autoenrollment error
... Microsoft Online Partner Support ... Automatic certificate enrollment for local system successfully received ... I read in a couple places to try "certutil -setreg SetupStatus ...
(microsoft.public.windows.server.active_directory)
Re: Autoenrollment
... Do you have CA server in your organization? ... Can you use ADSI Edit and check this object: ... following error message in my log: Event ID 13: ... Automatic certificate enrollment for local system failed to enroll for one ...
(microsoft.public.windows.server.general)
Re: Help with error messages from the server.
... Can save you a lot of trouble. ... > we do not use Exchange nor SQL. ... >>> Computer is my Server? ... >>> The automatic certificate enrollment subsystem could not access local ...
(microsoft.public.backoffice.smallbiz2000)