The pkiEnrollmentservice object is missing for us. What is the best way to recreate it? Thanks! Shawn

have you extended AD schema to Windows Server 2008 R2 schema?http://en-us.sysadmins.lv

Yes we have. We did an uninstall/reinstall which fixed the problem. Now I am getting this error: Active Directory Certificate Services denied request XXX because The revocation function was unable to check revocation for the certificate. 0x80092012 (-2146885614). Thanks for your help.

Hi, I find that you have created a new thread for the issue http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/a7e8f9e1-c45f-43e4-98fe-ef9881cda6b8. Please check the replies there. Thanks. This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.