RE: Event ID 15 Auto enrollment errors
- From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
- Date: Fri, 29 Jul 2005 05:04:00 GMT
Hi RJ,
Thank you for your post.
I understand the problem to be as follows: You have noticed Event ID 15 in
the Event Viewer. If I have misunderstood your concern, please don''t
hesitate to let me know.
Based on my research, the eEvent ID 15 indicates that the computer cannot
locate the Active Directory and it will be logged at 8-hour intervals in
the Application event log.
1. Please refer to the following article to disable Autoenrollment in the
Local Group Policy for a Windows XP-based or a Windows Server 2003-based
computer that is joined to a Windows NT 4.0 domain.
For more information about Event ID 15, please refer to:
310461 Problems When the Autoenrollment Feature Cannot Reach an Active
http://support.microsoft.com/?id=310461
So it seems that the root cause of all the issue is that the Windows XP
computer cannot connect the DC.
Based on my experience, if the DNS setting on the client computer is set
incorrectly, this issue will occur.
I suggest you check the following:
Suggestion 1:
==================
1. Go to property page of your local connection.
2. Go to TCP/IP settings and make sure that the DNS IP Address is your
DC''''s IP address.
3. Please apply the steps in following article on the Windows XP computer:
244474 How to Force Kerberos to Use TCP Instead of UDP
http://support.microsoft.com/?id=244474
Try to test, how about the result?
Suggestion 2:
===================
1. Click Start -> Run, type Msconfig and click OK.
2. Go to Services tab and click Hide All Microsoft Services and then click
Disable All.
3. Go to Startup tab and click Disable All.
4. Go to Gpedit.msc console. Go to Computer Configuration\Administrative
Template\System\Logon\.
5. Enable the policy entry "always wait for the network at computer startup
and logon".
6. Restart computer and test again.
Suggestion 3:
=====================
This issue could occur when a certification authority (CA) certificate is
renewed. If this is the case, please refer to the following article to
resolve it:
The Auto-Enrollment Objects Do Not Work When a Certification Authority
Certificate Is Renewed
http://support.microsoft.com/default.aspx?scid=kb;[LN];270048
Try to test, how about the result?
Suggestion 4:
=====================
This issue could occur when the AutoEnrollment settings are turned on and
there is no Active Directory to handle the request. To turn off
AutoEnrollment on the local machine:
1. Type gpedit.msc in the run line to open Group Policy Console.
2. Under Computer Configuration node, click Windows Settings.
3. Click on Public Key Policies
4. Double-Click on AutoEnrollment Settings in the right window.
5. Click on "Do not enroll certificates automatically" and click "ok"
Try to test, how about the result?
If you have any questions, please feel to let me know. I am glad to be of
assistance.
Have a nice day!
Best Regards,
Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
.
- References:
- Event ID 15 Auto enrollment errors
- From: RJ
- Event ID 15 Auto enrollment errors
- Prev by Date: RE: Event ID 1000
- Next by Date: RE: Net User Command - Charles Yang
- Previous by thread: Event ID 15 Auto enrollment errors
- Next by thread: UPS Worldship
- Index(es):
Relevant Pages
|
