Koozali.org: home of the SME Server

Automatic Certificate Enrollment

Marcus Rigby

Automatic Certificate Enrollment
« on: December 07, 2003, 12:12:41 AM »
'Automatic certificate enrollment for local system failed to contact the active directory(0x8007054b).  The specified domain controller does not exist or could not be contacted.  Enrollment will not be performed.'

The above error message keeps appearing in the event viewer of my WinXP Pro machine connected to an SME 5.6 machine setup as a domain controller, and it affects the performance of application using datafiles on the server drive, has anyone else had this problem, or even better do you have a solution

Thanks Marcus

Michael Doerner

Re: Automatic Certificate Enrollment
« Reply #1 on: December 07, 2003, 05:48:27 AM »
Marcus,

you have to disable this feature on the XP machine once. I use MS group policy editor (gpedit.msc) for this. It's under "Local Computer Policy/Computer Configuration/Windows Settings/Security Settings/Public Key Policies/Autoenrollment Settings". There you can disable it easily.

Michael Doerner

[%sig%]

Davidator

Re: Automatic Certificate Enrollment
« Reply #2 on: December 07, 2003, 11:56:27 AM »
In the /home/e-smith/files/server-ressources/regedit you will find a reg file containing all the modifications to apply to an XP client for it to be able to join the domain.