Article ID: 939088 - View products that this article applies to.
Consider the following scenario. You are using a Microsoft Windows Server 2003-based domain controller. The domain controller is part of a domain that does not have a certification authority (CA) installed. You receive the following event message in the Event Viewer System log:
Event Type: Warning
This issue may occur because of invalid domain controller certificates. Domain controller certificates may become invalid if you remove a CA that was installed in the domain. After you remove the CA, the domain controller still tries to contact the CA. Therefore, you receive the error message that is mentioned in the "Symptoms" section.
To resolve this issue, remove all the invalid domain controller certificates, as follows:
For more information about related issues, click the following article numbers to view the articles in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/887578/ )You receive a "Logon failure" message when you use a smart card on a Windows Server 2003-based computer
(http://support.microsoft.com/kb/892090/ )Group Policy settings are not applied when a user in an external Kerberos realm logs on to a Windows XP Professional-based or to a Windows 2000 Professional-based computer in a child domain
(http://support.microsoft.com/kb/929272/ )Interactive logon styles and Key Distribution Center account lookup in Windows Server 2003
Article ID: 939088 - Last Review: July 26, 2007 - Revision: 1.1