Duplicate Certificate Templates Appear in Active Directory

Article translations Article translations
Article ID: 264589 - View products that this article applies to.
This article was previously published under Q264589
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all

SYMPTOMS

Duplicate certificate templates may appear in Active Directory when you attempt to create or modify an Automatic Certificate Request, Public-Key Policy.

CAUSE

This behavior occurs when an additional Enterprise Certificate Authority (CA) is installed in Active Directory before the certificate template objects are completely replicated throughout the enterprise. When this happens, a replication collision occurs.

RESOLUTION

To resolve this issue, use the following steps:
  1. Click Start, click Run, type dssite.msc, and then press ENTER.
  2. Click View from the list, and then click Show Services Node.
  3. Expand the Services node.
  4. Expand Public Key Services.
  5. Click Certificate Templates.
  6. The right side of the screen is populated with certificate templates. Select all objects that have a Globally Unique Identifier (GUID) at the end of the object name, as shown in the following example:
       Machine|CNF:486198d0-d3ce-4dcd-82...
    					
  7. Press DELETE.
  8. Allow intra-site and inter-site replication to finish before you add any additional Enterprise CAs.

MORE INFORMATION

For additional information about replication collision, click the article number below to view the article in the Microsoft Knowledge Base:
218614 Replication Collisions in Windows 2000

Properties

Article ID: 264589 - Last Review: October 20, 2013 - Revision: 2.2
APPLIES TO
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
Keywords: 
kbnosurvey kbarchive kbactivedirectoryrepl kbcertservices kbenv kbgpo kbppkey kbprb kbschema KB264589

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com