AD CS Access Control
Applies To: Windows Server 2008
Certification authority (CA) access control permissions ensure that authorized components and users can complete required tasks. Access control errors can identify potential problems associated with insufficient or inappropriate use of permissions.
Events
| Event ID | Source | Message |
|---|---|---|
Microsoft-Windows-CertificationAuthority |
Active Directory Certificate Services did not start: The Certification Authority DCOM class for %1 could not be registered. %2. Use the Services snap-in to change the logon context for the certification authority. | |
Microsoft-Windows-CertificationAuthority |
Active Directory Certificate Services refused to process an extremely long request from %1. This may indicate a denial-of-service attack. If the request was rejected in error, modify the MaxIncomingMessageSize registry parameter via certutil -setreg CA\MaxIncomingMessageSize <bytes>. Unless verbose logging is enabled, this error will not be logged again for 20 minutes. |
|
Microsoft-Windows-CertificationAuthority |
Active Directory Certificate Services could not update security permissions. %1 |