You have a server named Server1 that runs Windows Server 2012 R2.
From Server Manager, you install the Active Directory Certificate Services server role on Server1.
A domain administrator named Admin1 logs on to Server1.
When Admin1 runs the Certification Authority console, Admin1 receives the following error
message.
You need to ensure that when Admin1 opens the Certification Authority console on Server1, the
error message does not appear.
What should you do?
A.
Run the Install-AdcsCertificationAuthority cmdlet.
B.
Install the Active Directory Certificate Services (AD CS) tools.
C.
Modify the PATHsystem variable.
D.
Add Admin1 to the Cert Publishers group.
Explanation:
* Cannot manage Active Directory Certificate Services
The error message is related to missing role configuration.
* Cannot Manage Active Directory Certificate Services
Resolution: configure the two Certification Authority and Certification Authority Web Enrollment
Roles.
* Active Directory Certificate Services (AD CS) is an Active Directory tool that lets administrators
customize services in order to issue and manage public key certificates.
AD CS included:
CA Web enrollment – connects users to a CA with a Web browser
Certification authorities (CAs) – manages certificate validation and issues certificates
Etc.
Incorrect:
Not A. The CA is installed, it just need to be configured correctly.
Note: Install-AdcsCertificationAuthority
The Install-AdcsCertificationAuthority cmdlet performs installation and configuration of the AD CS
CA role service. Cannot manage Active Directory Certificate Services in Server 2012 Error 0x800070002;
Active Directory Certificate Services (AD CS) Definition
http://searchwindowsserver.techtarget.com/definition/Active -Directory-Certificate-Services-AD-CS
Question 24 has a different answer for this error code about ADCS, which is it?
http://www.aiotestking.com/microsoft/you-need-to-ensure-that-when-admin1-opens-the-certification-authority-console-on-server1-the-error-message-does-not-appear-12/
0
0
I have the same question and i don’t find an answer with solid arguments. Did you solve it?. Thanks in advance
0
0
Hi Sako_Pako,sorry for bothering.Am just practicing 70-411v.7 questions and seen quite a few of your comments.Now you are on 70-412.I assume you passed 411.Did you find those questions relevant?Thank you for the answer and also CONGRATS to passing 🙂
0
0
Any question and any effort could do de difference between fail and pass the test. It’s true it is not that difficult but don’t understimate anything. Good look with 411. go for it, practice here and anyplace which supply questions.
0
0
To resolve the issue, you should configure the two Certification Authority and Certification Authority Web Enrollment from Server manager.
I believe that they are refering to that by saying installing the tools as installing just the the certification authority won’t be enough in this case.
0
0
Install-ADcsCertificationAuthority is the PS command to configure the CA after adding the CA role…
1
0
btw: B is senseless anyways, because just guess where the screenshot comes from 😀
1
0
A
tested
2
0
True. A.
Tested.
3
0
Great, Thxs
0
0
The answer is here:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/a0b36474-2daf-421f-9345-42e672922dd7/installing-certification-authority-on-server-2012-datacenter-rtm-results-in-0x80070002-and-certsrv?forum=winserver8gen
and here:
http://clintboessen.blogspot.com.es/2013/11/cannot-manage-active-directory.html
look for the error code to find the right answer. It’s A
Install-AdcsCertificationAuthority: Performs installation and configuration of the Active Directory Certificate Services (AD CS) Certification Authority (CA) role service.
2
0
p.s.
Free 391q dumps from Google Drive:
https://drive.google.com/open?id=0B-ob6L_QjGLpfm94alk1eU9xWjFYRkVoNkl0cjRiOXZRRjVkUXNXTklicDdKZDJwRGJCM1k
0
0
I passed with 793 on 8th nov 2017, this dumps are 100% valid but you need to understand the reasoning behind every questions. Thank you to those who spent their time in posting solutions here. this was in my exam today.
1
1
could it be possible that in this scenario, the user who installed ADCS did so via powershell and forgot to include the switch “-IncludeManagementTools”? Would still be considered as the user installed ADCS, regardless. But forgetting to include the management tools would probably give this error message, and you’d have to do Install-WindowsFeature ADCS-Cert-Authority -InstallManagementTools
Correct me if I’m wrong. I will try to replicate this situation on my server lab later this week when I time to do so
0
1
Ignore this, I could not replicate the issue above on my server lab, so I did some actual searching around when I had free time and came to my own conclusion that A must be the right answer here.
1
0
Guys I just tested and confirmed this in my lab environment.
Add Roles and Features and Add the ADCS Role
Try to run Certificate Authority and you get this exact error message
In the Actions menu you see Configure the ADCS server role. In my version of the exam this is an option
The other way to initiate this is to run Install-ADCSCertificateAuthority in elevated powershell
So my answer for this version would be A however in the version I have that has the Configure the ADCS role from Server manager I would pick this over powershell and the reason why is because in the question it states “From Server Manager,” meaning the user is already in this mode and it would be minimal admin work to continue in that same window
2
0