Specified Local group does not exist 0x560 starting certsvc

[Kbegg]

Was correcting a problem with Domain server autoenrollment following the
support KB article 903220. And after running the "certutil –setreg
SetupStatus –SETUP_DCOM_SECURITY_UPDATED_FLAG" command and stoping the
certsvc upon trying to start the certsvc i get the error

The specified local group does not exist. 0x560 (WIN32: 1376)

enabling debug logging for certificate services shows the following before
the service dies with the above error

421.445.0: 0x80070560 (WIN32: 1376): CERTSVC_DCOM_ACCESS
508.2406.0: 0x80070560 (WIN32: 1376)
429.2137.0: 0xffffffff (ESE: -1)
809.78.0: 0x80072095 (WIN32: 8341)
503.1506.0: 0x80070560 (WIN32: 1376)
503.2123.0: 0x80070560 (WIN32: 1376)
503.1824.0: 0x80070560 (WIN32: 1376)
517.258.0: 0x80070560 (WIN32: 1376)
503.2388.0: 0x80070560 (WIN32: 1376)
503.2452.0: 0x80070560 (WIN32: 1376)
CertSrv: Exit Status = The specified local group does not exist. 0x80070560
(WIN32: 1376)

if anyone has encountered this please let me know.

thanks

 

[Kbegg]

RE: Specified Local group does not exist 0x560 starting certsvc

Problem Solved:


It seemed that the CERTSVC_DCOM_ACCESS group had changed from a Domain Local
group to a Universal group. Changing the object back to a domain local group
fixed the issue.

thanks


"Kbegg" wrote:

> Was correcting a problem with Domain server autoenrollment following the
> support KB article 903220. And after running the "certutil –setreg
> SetupStatus –SETUP_DCOM_SECURITY_UPDATED_FLAG" command and stoping the
> certsvc upon trying to start the certsvc i get the error
>
> The specified local group does not exist. 0x560 (WIN32: 1376)
>
> enabling debug logging for certificate services shows the following before
> the service dies with the above error
>
> 421.445.0: 0x80070560 (WIN32: 1376): CERTSVC_DCOM_ACCESS
> 508.2406.0: 0x80070560 (WIN32: 1376)
> 429.2137.0: 0xffffffff (ESE: -1)
> 809.78.0: 0x80072095 (WIN32: 8341)
> 503.1506.0: 0x80070560 (WIN32: 1376)
> 503.2123.0: 0x80070560 (WIN32: 1376)
> 503.1824.0: 0x80070560 (WIN32: 1376)
> 517.258.0: 0x80070560 (WIN32: 1376)
> 503.2388.0: 0x80070560 (WIN32: 1376)
> 503.2452.0: 0x80070560 (WIN32: 1376)
> CertSrv: Exit Status = The specified local group does not exist. 0x80070560
> (WIN32: 1376)
>
> if anyone has encountered this please let me know.
>
> thanks
>
>

 

[Jose Luis Cirelli]

CERTSVC_DCOM_ACCESS Group Scope from Universal backDomain Local

CERTSVC_DCOM_ACCESS Group Scope from Universal backDomain Local

puzzling, yet changing the CERTSVC_DCOM_ACCESS Group Scope from Universal back Domain Local worked also for my Certificate Authority service as well; this kb 903220 is some worrisome technical document