Strict Standards: Non-static method Settings::setHostName() should not be called statically in C:\website\www.networksteve.com\forum\_lib\AutoConfig.php on line 20

Strict Standards: Non-static method Settings::addHostAlias() should not be called statically in C:\website\www.networksteve.com\forum\_lib\AutoConfig.php on line 22

Strict Standards: Non-static method Settings::setSiteRoot() should not be called statically in C:\website\www.networksteve.com\forum\_lib\AutoConfig.php on line 28

Strict Standards: Non-static method Settings::setDsn() should not be called statically in C:\website\www.networksteve.com\forum\_site\Config.php on line 16

Strict Standards: Non-static method Settings::setTitle() should not be called statically in C:\website\www.networksteve.com\forum\_site\Config.php on line 19

Strict Standards: Non-static method Settings::setDescription() should not be called statically in C:\website\www.networksteve.com\forum\_site\Config.php on line 20

Strict Standards: Non-static method Settings::setSiteRoot() should not be called statically in C:\website\www.networksteve.com\forum\_site\Config.php on line 24

Strict Standards: Non-static method Settings::setShowDeleted() should not be called statically in C:\website\www.networksteve.com\forum\_site\Config.php on line 31

Strict Standards: Non-static method Settings::setRecentTopicsDuration() should not be called statically in C:\website\www.networksteve.com\forum\_site\Config.php on line 36

Strict Standards: Non-static method Settings::test() should not be called statically in C:\website\www.networksteve.com\forum\_lib\Init.php on line 28

Strict Standards: Non-static method Skin::test() should not be called statically in C:\website\www.networksteve.com\forum\_lib\Init.php on line 29

Strict Standards: Non-static method Settings::getSkin() should not be called statically in C:\website\www.networksteve.com\forum\_lib\Skin.php on line 102

Strict Standards: Non-static method Settings::getSiteRoot() should not be called statically in C:\website\www.networksteve.com\forum\_lib\Init.php on line 32

Strict Standards: Non-static method Settings::getDsn() should not be called statically in C:\website\www.networksteve.com\forum\_lib\Init.php on line 35

Strict Standards: Non-static method Form::field() should not be called statically in C:\website\www.networksteve.com\forum\_lib\Init.php on line 39

Strict Standards: Non-static method Form::fieldExists() should not be called statically, assuming $this from incompatible context in C:\website\www.networksteve.com\forum\_lib\Entity\User.php on line 92

Strict Standards: Non-static method Form::fieldExists() should not be called statically in C:\website\www.networksteve.com\forum\topic.php on line 15

Strict Standards: Non-static method Form::field() should not be called statically in C:\website\www.networksteve.com\forum\topic.php on line 17

Strict Standards: Non-static method Settings::getShowDeleted() should not be called statically, assuming $this from incompatible context in C:\website\www.networksteve.com\forum\_lib\Entity\Topic.php on line 138

Strict Standards: Non-static method Entity_Post::queryPosts() should not be called statically in C:\website\www.networksteve.com\forum\topic.php on line 21

Strict Standards: Non-static method Settings::getShowDeleted() should not be called statically in C:\website\www.networksteve.com\forum\_lib\Entity\Post.php on line 111

Strict Standards: Non-static method Skin::showHeader() should not be called statically in C:\website\www.networksteve.com\forum\topic.php on line 23

Strict Standards: Non-static method Skin::includeFile() should not be called statically in C:\website\www.networksteve.com\forum\_lib\Skin.php on line 46

Strict Standards: Non-static method Settings::getSkin() should not be called statically in C:\website\www.networksteve.com\forum\_lib\Skin.php on line 91
Windows 7 Certificate Autoenrollment (Network Steve Forum)
Windows 7 Certificate Autoenrollment
Hi, We have had some issues with our Windows 7 clients retrieving a certificate from our Windows 2003 CA for a while now and I don't seem to know what is causing it. We have a custom certificate which is issued to computers for access to our corporate wireless network. Autoenrollement is set on the certificate and there is a security group applied to it that contains the computers who we would like access. When we want to grant users access to the wireless network we simply add their PC account to an AD group which then applies a group policy which enables autoenrollment! This group has Read, Enroll and Autoenroll permissions for the certificate. The system works well and Windows XP clients have no problems getting a certificate, however Windows 7 clients do not seem to be able to do it. When I try to obtain a certificate manually via the Certificates MMC on the Windows 7 clients I get the following error; Logon failure: the user has not been granted the requested logon type at this computer. There are some Application logs on the client as well which dhow the following information; Event ID: 67 Source: Microsoft-Windows-CertificateServicesClient-CertEnroll Detail: I am aware there is a problem with using the web cert enroll process from Windows 7 to a Windows 2003 CA as detailed in http://support.microsoft.com/kb/922706 but was not sure if this would affect Autoenrollment or enrollment via the MMC? Has anyone encountered this problem or know of a possible fix? We are in the process of evaulating W7 for rollout and have this problem on all our test machines. Thanks in advance Brian. Certificate enrollment for Local system failed to load policy from policy servers with ID {44E84A61-3DA1-4C54-985C-8F7E6CACC65E} (Logon failure: the user has not been granted the requested logon type at this computer. 0x80070569 (WIN32: 1385)) Event ID: 70 Source: Microsoft-Windows-CertificateServicesClient-CertEnroll Detail: Certificate enrollment for Local system failed because no valid policy can be obtained from policy servers with ID
July 16th, 2010 9:36am

It is important to separate autoenrollment and enrollment. Are the errors you have given related to the autoenrollment process on the client? If not try enabling the registry key given below, and reboot the client to see if any errors related to autoenrollment pops up. Also check the GPO's applied on the W7 client and confirm that the setting for automatic enrollment is processed (Enroll certificates automatically, Renew expired and Update certificates are applied on the client). In my experience it's usually either of the two; GPO not applied or a security issue where autoenroll right has not been set for the given client. Also if there are issues with autoenrollment you can set a registry key to get more information on the client. See http://technet.microsoft.com/en-us/library/cc755801(WS.10).aspx User Autoenrollment HKEY_CURRENT_USER\Software\Microsoft\Cryptography\Autoenrollment: Create a new DWORD value named AEEventLogLevel"; set value to 0. Machine Autoenrollment HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Autoenrollment: Create a new DWORD value named "AEEventLogLevel", set value to 0.
Free Windows Admin Tool Kit Click here and download it now
July 19th, 2010 8:16pm

Hi, Do you configure any other Certificate Enrollment Policy for the Windows 7 computer? Certificate Enrollment Policy Servers http://technet.microsoft.com/en-us/library/dd851661.aspx The default Certificate Enrollment Policy is Active Directory Enrollment Policy (Server URI is ldap: ). Please ensure that you logon the computer with a domain account and select that enrollment policy when you request certificate via MMC. If the issue continues, please enable CAPI2 log, reproduce the issue and let us know the events in the Event Viewer. For the steps to enable the CAPI2 log, please refer to the "Enable and save the CAPI2 log from Event Viewer" section at http://technet.microsoft.com/en-us/library/cc749296(WS.10).aspx. This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
July 22nd, 2010 7:40am


Strict Standards: Non-static method Settings::getRecentTopicsLimit() should not be called statically, assuming $this from incompatible context in C:\website\www.networksteve.com\forum\_lib\Entity\Topic.php on line 120

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics

Strict Standards: Non-static method Skin::showFooter() should not be called statically in C:\website\www.networksteve.com\forum\topic.php on line 119

Strict Standards: Non-static method Skin::includeFile() should not be called statically in C:\website\www.networksteve.com\forum\_lib\Skin.php on line 56

Strict Standards: Non-static method Settings::getSkin() should not be called statically in C:\website\www.networksteve.com\forum\_lib\Skin.php on line 91