Wednesday, January 28, 2009

Windows 2003 Cert Server Issue

So my Cert Server was working for years without issue (windows 2003). I noticed yesterday that my wireless network was refusing authentication. I looked at my Cisco aironet 1000 and 1200 APs and did not see anything amiss except for the error in the log:

Interface Dot11Radio0, Deauthenticating Station ... Reason: Previous authentication no longer valid

I looked at my AD server and found the following errors:

Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 13
Date: 1/27/2009
Time: 4:16:57 PM
User: N/A
Computer: MYADServer
Description:
Automatic certificate enrollment for local system failed to enroll for one Domain Controller certificate (0x80070005). Access is denied.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

This was caused by my upgrade of my CertServ to SP2 .

The issue was resolved by adding the AD group Domain controllers to the CERTSVC_DCOM_ACCESS group.

Now my AD server is autoenrolling and receiving a Domain controller certificate from my Cert server and in turn my users are now able to authenticate and logon to my wireless network.

No comments: