Autoenrollment Errors

Posted on 2009-12-29
Last Modified: 2013-12-01


I am attempting to resolve an autoenrollment issue

Event Type:    Error
Event Source:    AutoEnrollment
Event Category:    None
Event ID:    13
Date:        29/12/2009
Time:        05:13:18
User:        N/A
Computer:    Server01
Automatic certificate enrollment for local system failed to enroll for one Domain Controller certificate (0x800706ba).  The RPC server is unavailable.

I found the following solution. I would like to know what permissions should the group Addministrators/System and Everyone should have. is it read only or full control?

From a newsgroup post: "Can you check what are the ACLs on the directory %system drive%\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys? Does it have just "Everyone"? If this is the only permission it has, then enrollment will fail. After creating the private key, enrollment removes the "Everyone" group from the permission on the private key (as it is bad to have that), however if "Everyone" is the only ACL on the key, this renders the key not accessible by anyone. You should have only Administrators and System able to access the machine private keys".
Question by:mail2clk
    LVL 6

    Expert Comment

    Maybe a dumb question, but do you have an NT server still on the network?

    Author Comment

    We have two Windows 2003 servers on each of the two sites. The. CA is on one of the servers on the other site. Hope this helps.

    Accepted Solution

    I manage to resolve the issue. By allowing the network administrator which logs onto the server to request a certificate. This can be applied in Certification Authority. Right click on the top container then properties->security and ngive the network administrator that logs onto the server "Reqest Certificate" permission. I restarted the server and autoenrollment works.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
    In this article we have discussed the manual scenarios to recover data from Windows 10 through some backup and recovery tools which are offered by it.
    This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
    Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now