AD CS Access Control

Applies To: Windows Server 2008

Certification authority (CA) access control permissions ensure thatĀ authorized components and users can complete required tasks. Access control errorsĀ can identify potential problems associated with insufficient or inappropriate use of permissions.

Events

Event ID Source Message

39

Microsoft-Windows-CertificationAuthority

Active Directory Certificate Services did not start: The Certification Authority DCOM class for %1 could not be registered. %2. Use the Services snap-in to change the logon context for the certification authority.

60

Microsoft-Windows-CertificationAuthority

Active Directory Certificate Services refused to process an extremely long request from %1. This may indicate a denial-of-service attack. If the request was rejected in error, modify the MaxIncomingMessageSize registry parameter via
certutil -setreg CA\MaxIncomingMessageSize <bytes>.

Unless verbose logging is enabled, this error will not be logged again for 20 minutes.

92

Microsoft-Windows-CertificationAuthority

Active Directory Certificate Services could not update security permissions. %1

AD CS Certification Authority (CA)

Active Directory Certificate Services