Microsoft KB Archive/275679

= XADM: &quot;Unable to Create a Security Setting&quot; Error Message When You Try to Publish Certificates =

Article ID: 275679

Article Last Modified on 2/27/2007

-

APPLIES TO


 * Microsoft Exchange 2000 Server Standard Edition

-



This article was previously published under Q275679



SYMPTOMS
After users enroll in Exchange Advanced Security, they submit tokens through Microsoft Outlook. When you try to open the resulting e-mail message to obtain the certificate, the Outlook client tries to publish the certificate to the directory, and you receive the following error message:

Unable to create a Security Setting. Please request a new Security Token and try again.

NOTE: There is no associated event ID message logged after you receive this error message.



CAUSE
This problem occurs because there is no global catalog server available in the Outlook user's domain. A global catalog server must exist in the same domain as the Key Management server and in the user's domain, or the client cannot publish certificates to the directory.



RESOLUTION
To resolve this problem, make sure that at least one global catalog server exists in the KM server's local domain and in the user's local domain.

Additionally, if the user is in a different domain than the KM server, set the following registry entry on every client computer so that clients can publish to the global catalog server. To do so, follow these steps:
 * 1) Click Start, and then click Run.
 * 2) In the Open box, type regedit.
 * 3) Locate the following registry key:

NOTE: This registry key applies to Outlook 98 SR1 and Outlook 2000 SR1 (and earlier). If you use a more recent version of Outlook, replace HKEY_Local_Machine with HKEY_Current_User.
 * 1) Right-click Exchange Provider, point to New, and then click String Value.
 * 2) Type ds server, and then press ENTER.
 * 3) Right-click ds server, and then click Modify.
 * 4) In the Value data box, type name of the global catalog server.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.



MORE INFORMATION
A global catalog server is required in each domain that contains a KM server or users who must access a KM server.

Keywords: kbbug KB275679

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.