Re: Autoenrollment Event 13 Error 0x80040154

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi Jacky,

When I open the CA MMC and try to start the service I get a "not an
installed service" error message.

Cheers,
Bill

""Jacky Luo [MSFT]"" <v-jaluo@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:IOdbW2gaHHA.3820@xxxxxxxxxxxxxxxxxxxxxxxxx
Hi Bill,

Thanks for posting here.

From the description, I understand the issue is that you get an error in
the application log regarding automatic certificate enrollment. If I am
off
base, please don't hesitate to let me know.

the swing migration is not supported in this newsgroup, you had better
contact http://www.sbsmigration.com/ website for further efficient
assistance.

For you convenience,I would like to provide the following resolution for
your reference.

I.open the certification authority MMC, and start the service

II.restart the KDC services

III.If issue persists,please do the following:

Please add the correct permissions to the "\Documents and Settings\All
Users\Application Data\Microsoft\Crypto\RSA" folder. add full control for
System and Administrators (found that System was not listed for access and
Administrators was listed but with no access granted) and ran the
following
commands:

certutil -setreg SetupStatus -SETUP_DCOM_SECURITY_UPDATED_FLAG
net stop certsvc
net start certsvc

IV.the problem can be caused by insufficient permissions. So I suggest you
check the following for the current time:

1. Please check to ensure that a new security group, CERTSVC_DCOM_ACCESS,
has been created after applied the SP1 on the SBS server (If it has SP1
applied).

2. Please add the "Domain Users", "Domain Computers", "Domain Controllers"
groups and the to the new CERTSVC_DCOM_ACCESS security group.

3. Then, we can have Certificate Services update the DCOM security
settings
by running the following commands:

certutil -setreg SetupStatus -SETUP_DCOM_SECURITY_UPDATED_FLAG
net stop certsvc
net start certsvc


more information about your issue,Please refer to other's comment.

http://www.eventid.net/display.asp?eventid=13&eventno=2719&source=AutoEnroll
ment&phase=1



Have a nice day!

Best regards,

Jacky Luo (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
====================================================
PLEASE NOTE: The partner managed newsgroups are provided to
assist with break/fix issues and simple how to questions.
We also love to hear your product feedback! Let us know what you think by
posting

from the web interface: Partner Feedback
from your newsreader: microsoft.private.directaccess.partnerfeedback.

We look forward to hearing from you!
====================================================
When responding to posts, please "Reply to Group" via your newsreader
so that others may learn and benefit from this issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.
====================================================



.

Relevant Pages

  • RE: Cannot open the Microsoft Access Jet engine workgroup information
    ... with an .mdw file. ... Post your question in the Security group and I think someone there can help. ... "Lloyd" wrote: ... > or open a current database, they receive the following error message: ...
    (microsoft.public.access.modulesdaovba)
  • Re: change name of security group
    ... How can I change the name of an AD Security Group? ... change the Group Name (Pre-Windows 2000) as well as the Exchange Display ... In MMC, it still ...
    (microsoft.public.windows.server.active_directory)