We have a Windows 2008 R2 domain. With our user of the Domain Admins group, install Certificate Server on a Windows 2008 member server. All ends well and we have to generate a Web server certificate by opening an Internet Explorer window first appears we are not Web server template. If you select a user then we find the error:
COM Error Information: CCertRequest:: Submit: The RPC server is unavailable. 0x800706ba (WIN32: 1722)
If we look in the event viewer to see an event occurs 10016:
specific permission settings of the application does not grant Local Activation permission for COM Server application with CLSID {
D99E6E74-FC88-11D0-B498-00A0C90312F3}
the user domain \\ myuser with SID (S-1-5-21-. ..) at the address LocalHost (with LRPC). This security permission can be modified using the Component Services administrative tool.
Review all groups, users and permissions and everything seems to be correct.
If I go with the user domain \\ administrator then if that generates good certificates. I note that my domain admin user belongs to the same groups as the "manager" and yet still does not work.
The solution to this is the chance encounter when I'm checking the connectivity dcdiag. It turns out that if you run from a Windows system without the more you get errors while if you open it as administrator then everything is correct. Lighter
water. I open the Internet Explorer window as an administrator and then if that shows all the available templates including Web server, and certificate generation without error.
This solemn bullshit head has taken me longer than it should. You are warned. That you take advantage.
Related Links:
http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/bd5f0011-5335-4c5f-8407-10c6260bab5d
http://circulotito.blogspot.com/2008/06/dcom-event-10016-no-concede-permiso-de.html
