Windows 2000 Enterprise CAs Not Added to Certificate Publishers Group in Windows Server 2003 Domain (300532)


The information in this article applies to:

  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, 64-Bit Enterprise Edition
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Server
This article was previously published under Q300532

SYMPTOMS

After you add Enterprise Certification Authority (CA) functionality to a Windows 2000 Server-based computer in a Windows Server 2003 domain, the Windows 2000 CA may not be able to publish certificates to the Active Directory. The following error entry may also appear in the Application Event log:
Event Type: Warning
Event Source: CertSvc
Event Category: None
Event ID: 80
Date: date
Time: time
User: N/A
Computer: CA01
Description:

Certificate Services could not publish a Certificate for request 49546 to the following location on server DC02.example.microsoft.com: CN=Test,OU=Users,DC=example,DC=microsoft,DC=com. The administrative limit for this request was exceeded. 0x80072024 (WIN32: 8228). ldap: 0xb: 00002024: SvcErr: DSID-02050ABE, problem 5008 (ADMIN_LIMIT_EXCEEDED), data -1026


For more information, see Help and Support Center at http://search.support.microsoft.com/search/?adv=1.

CAUSE

Windows 2000 Enterprise CAs are not automatically added to the Certificate Publishers group in a Windows Server 2003 domain.

RESOLUTION

Manually add the computer account for the Windows 2000 CA to the Certificate Publishers group in the root domain of the forest:
  1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. Double-click the domain name in the left-side pane.
  3. Double-click the Users container.
  4. Double-click the Cert Publishers group in the right-side pane.
  5. Click the Members tab, and then click Add.
  6. Browse to the name of the computer that is hosting the CA (or type this name), and then click OK.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
Modification Type:MajorLast Reviewed:7/17/2006
Keywords:kbenv kbprb KB300532
©2004 Microsoft Corporation. All rights reserved.