Link to home
Start Free TrialLog in
Avatar of McKuser
McKuserFlag for Canada

asked on

Windows Certificate Authority server (access denied)

We have been running our Windows CA server for a few years now.  Today, I tried accessing the CA console on the Win2003 server and received "Access Denied. 0x80070005 (Win32:5)) error msg.
Whenever I clicked on the "Revoked Certificates", "Issued Certificates", "Pending Requests" and "Failed Requests", I get this error msg.  However, when I clicked on "Certificate Templates", it's fine.
I noticed I get a lot of these errors in my Event Log.  Wonder if this has anything to do with it?

Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10016
Date:            1/29/2010
Time:            10:05:57 AM
User:            Domain1\Admin1
Computer:      SERVER8
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D99E6E73-FC88-11D0-B498-00A0C90312F3}
 to the user MCKENZIE1\AdminMcK1 SID (S-1-5-21-197287265-861765437-1439788725-500).  This security permission can be modified using the Component Services administrative tool.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Avatar of Paranormastic
Paranormastic
Flag of United States of America image

You need to grant CERTSRV_DCOM_ACCESS group local launch permissions to the CertSrv object in DCOM.

Avatar of McKuser

ASKER

Is this "CertSrv" object found in Component services?  If so, I granted the permission but still got access denied error even after I've restarted the Certificate services.
ASKER CERTIFIED SOLUTION
Avatar of Paranormastic
Paranormastic
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial