fiza Posted April 13, 2015 Posted April 13, 2015 We keep getting Certificate enrolment errors on our DCs which appear to be from servers/machines that no longer exist and haven't existed for quite some time. Certificate enrollment for Local system failed to enroll for a DomainController certificate with request ID N/A from vle.domain.school.borough.sch.uk\School (The RPC server is unavailable. 0x800706ba (WIN32: 1722)). where are these errors coming from and how can I get rid of them?
featured_spectre Posted April 14, 2015 Posted April 14, 2015 Were the machines removed from the active directory?
fiza Posted April 14, 2015 Author Posted April 14, 2015 Were the machines removed from the active directory? Yes they were as far as I know. Certainly are not in there now.
fiza Posted April 14, 2015 Author Posted April 14, 2015 Does the VLE think the machines exist? Its the vle machine that doesn't exist anymore, along with an old file server and a remote access server.
psydii Posted April 15, 2015 Posted April 15, 2015 I'd guess that the host vle was a dc and the enterprise root certificate authority. You should be able to confirm this by querying ad for the certificate authority detail. It should be as simple as removing all references to the old DC from AD and then removing the certificates from the local cert stores on the affected machines. This article should give you what you need to know: http://social.technet.microsoft.com/wiki/contents/articles/3527.how-to-decommission-a-windows-enterprise-certification-authority-and-how-to-remove-all-related-objects.aspx
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now