Microsoft KB Archive/300532

= Windows 2000 Enterprise CAs Not Added to Certificate Publishers Group in Windows Server 2003 Domain =

Article ID: 300532

Article Last Modified on 3/2/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Server

-



This article was previously published under Q300532



SYMPTOMS
After you add Enterprise Certification Authority (CA) functionality to a Windows 2000 Server-based computer in a Windows Server 2003 domain, the Windows 2000 CA may not be able to publish certificates to the Active Directory. The following error entry may also appear in the Application Event log:

Event Type: Warning

Event Source: CertSvc

Event Category: None

Event ID: 80

Date: date

Time: time

User: N/A

Computer: CA01

Description:

Certificate Services could not publish a Certificate for request 49546 to the following location on server DC02.example.microsoft.com: CN=Test,OU=Users,DC=example,DC=microsoft,DC=com. The administrative limit for this request was exceeded. 0x80072024 (WIN32: 8228). ldap: 0xb: 00002024: SvcErr: DSID-02050ABE, problem 5008 (ADMIN_LIMIT_EXCEEDED), data -1026

For more information, see Help and Support Center at http://search.support.microsoft.com/search/?adv=1.



CAUSE
Windows 2000 Enterprise CAs are not automatically added to the Certificate Publishers group in a Windows Server 2003 domain.



RESOLUTION
Manually add the computer account for the Windows 2000 CA to the Certificate Publishers group in the root domain of the forest:
 * 1) Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
 * 2) Double-click the domain name in the left-side pane.
 * 3) Double-click the Users container.
 * 4) Double-click the Cert Publishers group in the right-side pane.
 * 5) Click the Members tab, and then click Add.
 * 6) Browse to the name of the computer that is hosting the CA (or type this name), and then click OK.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Keywords: kbenv kbprb KB300532

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.