Issues configuring NDES RRS feed

  • Question

  • Hi - I'm hoping someone can help me figure out what I'm missing on this NDES install.

    I am getting the following error when installing NDES in an environment. Here is the relevant information on the environment:

    CAs are installed in the root forest domain

    NDES server is installed in the same forest in a child domain (supported according to the technet article "Configure infrastructure to support SCEP with Intune"

    Account logged into the machine is an enterprise administrator

    The service account is a member of the local administrator group on the NDES server, and has rights to manage CA on the CA.

    The error received is:

    Install-AdcsNetworkDeviceEnrollmentService : CMSCEPSetup::Install: Access is denied. 0x80070005 (WIN32: 5
    At line:1 char:1
    + Install-AdcsNetworkDeviceEnrollmentService -ServiceAccountName "svcnd ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : NotSpecified: (:) [Install-AdcsNet...rollmentService], UnauthorizedAccessException
        + FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.CertificateServices.Deployment.Commands.NDE

    Wednesday, October 30, 2019 3:53 PM

All replies