When issuing Enterprise Root-CA, it shows "Active Directory Certificate Services could not connect to Global Catalog Server"

[Samuel_TRX]

I'm working on ADCS in my environment. I've configured a GPO to let domain computers auto-enroll the certificate from CA Server. However, when the domain computers request a certificate, the CA server shows "Denied by Policy Module 0x8007003a, Active Directory Certificate Services could not connect to Global Catalog Server". But what interesting is, the certificate somehow will issue successfully when the domain computers requested several times. Lemme give you some background of my environment.6DCs (subdomain.root.domain.com) + 2DCs (root.domain.com)All DCs are configured as Global Catalog Se

Continue reading...