If the DCOM interface contains both RunAs and LocalService entries, the Certificate Authority service gets confused.
To resolve the problem, use Regedt32 to navigate to both (if they exist):
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\\{D99E6E74-FC88-11D0-B498-00A0C90312F3\}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppId\\{D99E6E73-FC88-11D0-B498-00A0C90312F3\}
Delete the RunAs entries.
Make sure the LocalService value name exists and that it is set to CertSvc.
0 comments
Hide comments