From: Ray on
Thanks, Paul.

Everything looks fine now except that I cannot give a certificate to the
remote domail controller because our router is blocking port 135.

Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 13
Date: 2/5/2006
Time: 8:07:35 PM
User: N/A
Computer: ADC3
Description:
Automatic certificate enrollment for local system failed to enroll for one
Domain Controller certificate (0x800706ba). The RPC server is unavailable.

If the only way to issue the certificate is based RPC, it's hard to me, move
it to local office and then move back???

Ray

"Paul Williams [MVP]" <ptw2001(a)hotmail.com> wrote in message
news:OqnAWEuKGHA.604(a)TK2MSFTNGP14.phx.gbl...
> Now that the ISM is working, wait for the KCCs to run (15 minutes) and
> then
> run REPLMON and force replication (push and cross site boundaries). Is
> replication occurring or are you getting an error?
>
> If an error, what are the Directory Services event logs saying?
>
> Note. REPLMON is a support tool:
> http://www.msresource.net/content/view/53/46/
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>


From: Paul Williams [MVP] on
Have a look at this:
--
http://www.eventid.net/display.asp?eventid=13&eventno=2719&source=AutoEnrollment&phase=1


Also Google the Microsoft groups (using Google groups append
group:microsoft.* to your search criteria) for that error - it has been
answered several times of late.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


From: Ray on
Thanks, Paul. However, the URL could not solve my problem. I've asked a
temporary exception for using port 135.

Anyway, thank you again for all helps.

Ray

"Paul Williams [MVP]" <ptw2001(a)hotmail.com> wrote in message
news:1139240420.228735(a)ernani.logica.co.uk...
> Have a look at this:
> --
> http://www.eventid.net/display.asp?eventid=13&eventno=2719&source=AutoEnrollment&phase=1
>
>
> Also Google the Microsoft groups (using Google groups append
> group:microsoft.* to your search criteria) for that error - it has been
> answered several times of late.
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>