Microsoft KB Archive/284435

= An Error Message Is Displayed When You Use Windows Server Certification Authority Snap-ins Together =

PSS ID Number: 284435

Article Last Modified on 12/18/2003

-

The information in this article applies to:


 * Microsoft Windows Server 2003, 64-Bit Enterprise Edition
 * Microsoft Windows Server 2003, Datacenter Edition
 * Microsoft Windows Server 2003, Enterprise Edition
 * Microsoft Windows Server 2003, Standard Edition
 * Microsoft Windows Small Business Server 2003, Premium Edition
 * Microsoft Windows Small Business Server 2003, Standard Edition

-



This article was previously published under Q284435



SYMPTOMS
When you use a certification authority (CA) snap-in from Windows Server 2003 to administer a Microsoft Windows 2000 CA, you receive the following error message:

Access is denied: 0x80070005 (win32:5)

A Windows 2000 CA snap-in that is used to manage Windows Server 2003 Certificate Services does not display any information that is related to revoked certificates, issued certificates, pending requests, or failed requests.



CAUSE
This behavior can occur because Windows Server 2003 certificate server can only be managed with the CA Microsoft Management Console (MMC) snap-in that is provided with Windows Server 2003, and Windows 2000 certificate server can only be managed with the snap-in that is provided with Windows 2000 Server.

NOTE: These restrictions also apply to the CA MMC snap-ins that are provided with the Adminpak.msi file on either the Windows Server 2003 or Windows 2000 Server CD-ROM.



RESOLUTION
As a workaround, if you need to manage Windows 2000 Certificate Services from a Windows Server 2003-based computer, you must use Terminal Services on the Windows 2000-based computer with the Windows Server 2003 Remote Desktop Connection tool.

If you need to administer Windows Server 2003 Certificate Services from a Windows 2000-based computer, you must use the Terminal Services client or Remote Desktop Connection client on the Windows 2000-based computer to connect to Remote Desktop or Terminal Services on the Windows Server 2003-based computer.



STATUS
This behavior is by design.



MORE INFORMATION
In general, down-level administrative tools should not be used to administer services on newer versions of the operating system.

Additional query words: certsrv.msc services administer manage

Keywords: kbCertServices kbprb w2000certsrv KB284435

Technology: kbSBServ2003Pre kbSBServ2003Search kbSBServ2003St kbSBServSearch kbWinServ2003Data kbWinServ2003DataSearch kbWinServ2003Ent kbWinServ2003Ent64bit kbWinServ2003Ent64bitSearch kbWinServ2003EntSearch kbWinServ2003Search kbWinServ2003St

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.