AD Certificate Server will not start on SBS2011
Log Name: System
Source: Service Control Manager
Date: 04/03/2021 09:21:47
Event ID: 7024
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DH-2011-S1.************.local
Description:
The Active Directory Certificate Services service terminated with service-specific error %%-939523769.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7024</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2021-03-04T09:21:47.511055500Z" />
<EventRecordID>1820356</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="8436" />
<Channel>System</Channel>
<Computer>DH-2011-S1.********.local</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Active Directory Certificate Services</Data>
<Data Name="param2">%%-939523769</Data>
</EventData>
</Event>
Source: Service Control Manager
Date: 04/03/2021 09:21:47
Event ID: 7024
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DH-2011-S1.************.local
Description:
The Active Directory Certificate Services service terminated with service-specific error %%-939523769.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7024</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2021-03-04T09:21:47.511055500Z" />
<EventRecordID>1820356</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="8436" />
<Channel>System</Channel>
<Computer>DH-2011-S1.********.local</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Active Directory Certificate Services</Data>
<Data Name="param2">%%-939523769</Data>
</EventData>
</Event>
This question needs an answer!
Become an EE member today
7 DAY FREE TRIALMembers can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See if the following helps
https://support.microsoft.com/en-us/topic/the-active-directory-certificate-services-service-does-not-start-on-a-windows-server-2008-based-certification-authority-server-if-the-key-storage-provider-does-not-support-sha1-hash-signing-703681ac-4c40-ca47-9133-a7d2798a3afa
Are there other errors related to this.
Is this system in the certificate_related security group?
As well as this describing the sevurity groups related to certificates, doom access and publisher.
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups