Active Directory Certificate Services Disabled- Enterprise SubCA

Venkata Chaitanya Raju Konduru 21 Reputation points
2021-05-24T12:50:36.233+00:00

Active Directory Certificate Services is getting disabled automatically on the SubCA which is in Azure. Any reason why that would happen?

There is no issue with CDP/AIA. Once the service is manually enabled, CA service runs without any issue. I have another SubCA in the same subnet and it doesn't have any issue like this.

Any leads in this regard would be appreciated. Thank you.

Regards,
Chaitanya.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,200 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,732 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Daisy Zhou 18,716 Reputation points Microsoft Vendor
    2021-05-27T07:27:16.087+00:00

    Hello @Venkata Chaitanya Raju Konduru ,

    Thank you for posting here.

    Hope the information provided by Crypt32 is helpful.

    If now the issue still occurs. Can you start the AD CS service after it is disabled?

    If so, you can start the AD CS service and check whether the service will be disabled again?

    If the AD CS service is disabled at a specific time or regularly, you can grab Process Monitor to see if it helps when the problem occurs.

    1.Download and install Process Monitor tool on the machine here.
    https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

    2.Run Network Monitor as administrator.

    3.Wait for the issue reproduces (remember/write the timestamp the issue reoccurs) and stop the trace after the AD CS is disabled.

    4.Save the process monitor trace.

    Note:
    As private information and security information may be involved, the forum does not collect log information. Please try to view the saved logs yourself (look for processes or applications that may disable the service based on the point in time when the problem occurred).

    Hope the information above is helpful.

    Should you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.