Location: List Archives

List Archives

This forum is an archive of all posts to our mailing list over the past few years.  The forum is set read only therefore to contribute you will need to join our list community.  See more info about this here.

List Archives

Forums >ActiveDir Mail List Archive >List Archives
Subject: Re: [ActiveDir] Autoenrollment errors, CERTSRV_DCOM_ACCESS missing
Prev Next
You are not authorized to post a reply.

AuthorMessages
albertholsUser is Offline

Posts:4

07/18/2008 9:12 AM  
HI, There is another article also describing what to when the security group is not created... Please have a look at: http://support.microsoft.com/kb/927066 Especially this part: 4. Settings may be incorrect if any one of the following conditions is true: • The CERTSVC_DCOM_ACCESS group does not exist. • The default membership of the CERTSVC_DCOM_ACCESS group is incorrect. • The CERTSVC_DCOM_ACCESS group does not have the correct permissions. If any one setting is incorrect, run the following commands at a command prompt. Press ENTER after each command. certutil -setreg SetupStatus -SETUP_DCOM_SECURITY_UPDATED_FLAG net stop certsvc net start certsvc After the group is there you need to be sure to add the "domain controllers" group as that one is not added by default. Hope this helps, Regards, Albert On Wed, Jul 16, 2008 at 10:15 PM, EIS Lists <eis_lists@sbcglobal.net> wrote: > Thanks, Albert. I have read that article. It does not seem to address the > issue of the CERTSRV_DCOM_ACCESS security group *not existing*. The > article says that group is created automatically during the upgrade to SP1. > In our case, it does not seem to exist. > > > > I can create the group and add the proper accounts, but I am not sure that > will do anything. > > > > -- nme > > > > *From:* ActiveDir-owner@mail.activedir.org [mailto: > ActiveDir-owner@mail.activedir.org] *On Behalf Of *Albert > *Sent:* Wednesday, July 16, 2008 10:32 AM > *To:* ActiveDir@mail.activedir.org > *Subject:* Re: [ActiveDir] Autoenrollment errors, CERTSRV_DCOM_ACCESS > missing > > > > Please have a look at: > > http://support.microsoft.com/default.aspx?scid=kb;EN-US;903220 > > > > There you would find the solution most likely, > > > > Regards, > > > > Albert > > On Wed, Jul 16, 2008 at 6:18 PM, EIS Lists <eis_lists@sbcglobal.net> > wrote: > > Hello: > > > > I have several DCs giving autoenrollment errors. >From what I can see, it > means that the DC is not a member of the CERTSRV_DCOM_ACCESS security > group. However, as far as I can tell, that group does not exist. Any ideas > why this might be or how to correct it? > > > > Thanks, > > > > -- nme > > > > > > >
You are not authorized to post a reply.
Forums >ActiveDir Mail List Archive >List Archives > Re: [ActiveDir] Autoenrollment errors, CERTSRV_DCOM_ACCESS missing



ActiveForums 3.7
AdventNet Banner
Friends

Friends

Namescape
Members

Members

MembershipMembership:
Latest New UserLatest:cmilte
New TodayNew Today:2
New YesterdayNew Yesterday:2
User CountOverall:4264
People OnlinePeople Online:
VisitorsVisitors:59
MembersMembers:0
TotalTotal:59
Online NowOnline Now:

Ads

Copyright 2008 ActiveDir.org
Terms Of Use