List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] 2000 to 2003 CA upgrade

Prev Next

You are not authorized to post a reply.

Author

Messages

Julio.muniz User is Offline

Posts:24

08/20/2010 7:54 PM
I upgraded a clean Windows 2000 x32 server which holds CA Services to Windows 2003 x32 server this week. The upgrade went smooth and enrollment functionality seems to have gone smooth as all new machines certs and user requested certs processed as expected. However when I launch the certsrv.msc I get prompted that "certification authority registration and security settings need to be upgraded from Windows 2000 format...." and it fails when I select yes. The error is Error 0x5012(Win32: 20498). I enabled verbose logging on CA services and I see the following error on the log every time: 429.2137.0: 0x32 (WIN32: 50): 00000005: SecErr: DSID-03152492, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 I found some MS sites on permissions ADCS services level and followed those steps via Active Directory Sites MMC and no luck. I also logged into the CA server with Enterprise Admin rights and the problem persists. ANY THOUGHTS !!!!! Regards Julio

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] 2000 to 2003 CA upgrade

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads