Event ID:13 na dodatnem strežniku v domenskem/AD okolju Windows server 2003 / Event ID:13 on additional server in domain/AD environment based on Windows server 2003

Če se vam v Event logu vsakih osem(8) ur pojavlja sledeča napaka: / If you get this error every eight(8) hours:

Event ID:13 – Automatic certificate enrollment for local system failed to enroll for one Domain Controller certificate (0x80070005). Access is denied.

…in je vaš strežnik Windows server 2003 z nameščenim Servisnim paketom 1 / … and your server runs Windows server 2003 with Service pack 1…

…morate dodati varnostno skupino Domain controllers kot člana v varnostni skupini: CERTSVC_DCOM_ACCESS / … than you must add security group Domain controllers as a member of a group: CERTSVC_DCOM_ACCESS

Ko enkrat dodamo skupino ponovno zaženemo Certsrv po sledečih korakih: / After adding a group we must restart Certsrv using folowing steps:

1. certutil –setreg SetupStatus –SETUP_DCOM_SECURITY_UPDATED_FLAG
2. net stop certsvc
3. net start certsvc

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s