Hi - I'm hoping someone can help me figure out what I'm missing on this NDES install.
I am getting the following error when installing NDES in an environment. Here is the relevant information on the environment:
CAs are installed in the root forest domain
NDES server is installed in the same forest in a child domain (supported according to the technet article "Configure infrastructure to support SCEP with Intune"
Account logged into the machine is an enterprise administrator
The service account is a member of the local administrator group on the NDES server, and has rights to manage CA on the CA.
The error received is:
Install-AdcsNetworkDeviceEnrollmentService : CMSCEPSetup::Install: Access is denied. 0x80070005 (WIN32: 5
ERROR_ACCESS_DENIED)
At line:1 char:1
+ Install-AdcsNetworkDeviceEnrollmentService -ServiceAccountName "svcnd ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Install-AdcsNet...rollmentService], UnauthorizedAccessException
+ FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.CertificateServices.Deployment.Commands.NDE
S.InstallAdcsNetworkDeviceEnrollmentService
