+ Post New Thread
Results 1 to 2 of 2
Windows Server 2000/2003 Thread, Event ID 16 AutoEnrollment errors, since CA was removed in Technical; "Automatic certificate enrollment for local system failed to renew one Domain Controller certificate (0x800706ba). The RPC server is unavailable." In ...
  1. #1

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,632
    Thank Post
    514
    Thanked 2,442 Times in 1,890 Posts
    Blog Entries
    24
    Rep Power
    831

    Event ID 16 AutoEnrollment errors, since CA was removed

    "Automatic certificate enrollment for local system failed to renew one Domain Controller certificate (0x800706ba). The RPC server is unavailable."

    In the new school I'm in, the network used to be part of a managed service, with a central data centre etc...

    At the end of the managed service, the company stuck in 2 new servers as forest root controllers, which are clones of the ones they had at the datacentre (they did this for each school).

    Now that I have taken over, I'm trying to tidy things up and get my head around things.

    In our event logs, we are receiving a lot of the events mentioned in the title.

    The thing is, the CA that issued those certificates doesn't exist any more as far as I know. Can someone point me in the right direction to fixing this?

    We're also getting Event ID 13 messages along similar lines.

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,060
    Thank Post
    853
    Thanked 2,675 Times in 2,269 Posts
    Blog Entries
    9
    Rep Power
    768
    Step 9 from here plus possibly the rest of it.
    How to decommission a Windows enterprise certification authority and how to remove all related objects from Windows Server 2003 and from Windows Server 2000
    Step 9: Clean up domain controllers

    After the CA is uninstalled, the certificates that were issued to domain controllers must be removed.

    To remove certificates that were issued to the Windows Server 2000 domain controllers, use the Dsstore.exe utility from the Microsoft Windows 2000 Resource Kit.

    To remove certificates that have been issued to the Windows Server 2000 domain controllers, follow these steps:
    1. Click Start, click Run, type cmd, and then press ENTER.
    2. On a domain controller, type dsstore -dcmon at the command prompt, and then press ENTER.
    3. Type 3, and then press ENTER. This action deletes all certificates on all domain controllers.

      Note The Dsstore.exe utility will try to validate domain controller certificates that are issued to each domain controller. Certificates that do not validate are removed from their respective domain controller.
    To remove certificates that were issued to the Windows Server 2003 domain controllers, follow these steps.

    Important Do not use this procedure if you are using certificates that are based on version 1 domain controller templates.
    1. Click Start, click Run, type cmd, and then press ENTER.
    2. At the command prompt on a domain controller, type certutil -dcinfo deleteBad.
    How to remove manually Enterprise Windows Certificate Authority from Windows 2000/2003 Domain

SHARE:
+ Post New Thread

Similar Threads

  1. Event ID 578 SeTcbPrivilege
    By cookie_monster in forum Windows
    Replies: 2
    Last Post: 30th January 2008, 10:35 AM
  2. DNS Problems Event ID 4004
    By Rozzer in forum Windows
    Replies: 5
    Last Post: 3rd September 2007, 01:52 AM
  3. Event ID errors in ePortal
    By tosca925 in forum MIS Systems
    Replies: 0
    Last Post: 14th May 2007, 12:18 PM
  4. event ID 11708 - Sophos EM on New Server
    By monsterplastic in forum Windows
    Replies: 13
    Last Post: 9th March 2007, 05:28 AM
  5. Event ID WebSite
    By ninjabeaver in forum Links
    Replies: 0
    Last Post: 24th June 2005, 01:34 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •