Hello,
I have downloaded and successfully installed the trial version of Microsoft System Center Essentials 2007 SP1 to see if it is suitable for our environment. The install was successful, but during feature configuration the group policy piece fails with an "Access is denied" error. The Remote Assistance, firewall exceptions, and error monitoring features fail as well. I installed SCE and am configuring it using a Domain Admin account that also has Full Delegate Control permissions for Active Directory. Looking at the error logs in the temp folder I see two pertinent log files. The first one contains the following information:
10:46 AM: Params : D:\System Center Essentials 2007\\Certificates\WSUSCodeSigningCert.cer
10:46 AM: Got the code signing certificate from WSUS
10:57 AM: Params : D:\System Center Essentials 2007\\Certificates\WSUSCodeSigningCert.cer
10:57 AM: Got the code signing certificate from WSUS
The second one contains the following information:
CreateSelfSignedCertificate: Failed to generate the cryptographic key: 0x80070005.
CreateSelfSignedCertificate returned 0x80070005
CreateCertAndConfigureGroupPolicyDoWork failed with hr = 80070005
CreateCertAndConfigureGroupPolicy: Returned from thread
CreateCertAndConfigureGroupPolicy: Worker thread failed with error code of: 0x80070005
CreateCertAndConfigureGroupPolicy: WaitForSingleObject returned: 0x80070005
With the certificate snap-in I can see that the certificate for WSUS is indeed created, but apparently not applied to the WSUS website on IIS. that is the only certificate I see for this server.
I am in an SBS 2008 environment, but the SCE install is on Server 2003 R2 (x86) member server. Windows Firewall is off on both machines. I am using the domain-level group policy option and a local install of SQL 2005 Express. Does anyone have any ideas as to how I can successfully complete the feature configuration? Please let me know if you need any other information in regards to my configuration or environment.