Specified Local group does not exist 0x560 starting certsvc

[Guest Kbegg]

Was correcting a problem with Domain server autoenrollment following the

support KB article 903220. And after running the "certutil –setreg

SetupStatus –SETUP_DCOM_SECURITY_UPDATED_FLAG" command and stoping the

certsvc upon trying to start the certsvc i get the error

 

The specified local group does not exist. 0x560 (WIN32: 1376)

 

enabling debug logging for certificate services shows the following before

the service dies with the above error

 

421.445.0: 0x80070560 (WIN32: 1376): CERTSVC_DCOM_ACCESS

508.2406.0: 0x80070560 (WIN32: 1376)

429.2137.0: 0xffffffff (ESE: -1)

809.78.0: 0x80072095 (WIN32: 8341)

503.1506.0: 0x80070560 (WIN32: 1376)

503.2123.0: 0x80070560 (WIN32: 1376)

503.1824.0: 0x80070560 (WIN32: 1376)

517.258.0: 0x80070560 (WIN32: 1376)

503.2388.0: 0x80070560 (WIN32: 1376)

503.2452.0: 0x80070560 (WIN32: 1376)

CertSrv: Exit Status = The specified local group does not exist. 0x80070560

(WIN32: 1376)

 

if anyone has encountered this please let me know.

 

thanks

[Guest Kbegg]

RE: Specified Local group does not exist 0x560 starting certsvc

 

Problem Solved:

 

 

It seemed that the CERTSVC_DCOM_ACCESS group had changed from a Domain Local

group to a Universal group. Changing the object back to a domain local group

fixed the issue.

 

thanks

 

 

"Kbegg" wrote:

> Was correcting a problem with Domain server autoenrollment following the

> support KB article 903220. And after running the "certutil –setreg

> SetupStatus –SETUP_DCOM_SECURITY_UPDATED_FLAG" command and stoping the

> certsvc upon trying to start the certsvc i get the error

>

> The specified local group does not exist. 0x560 (WIN32: 1376)

>

> enabling debug logging for certificate services shows the following before

> the service dies with the above error

>

> 421.445.0: 0x80070560 (WIN32: 1376): CERTSVC_DCOM_ACCESS

> 508.2406.0: 0x80070560 (WIN32: 1376)

> 429.2137.0: 0xffffffff (ESE: -1)

> 809.78.0: 0x80072095 (WIN32: 8341)

> 503.1506.0: 0x80070560 (WIN32: 1376)

> 503.2123.0: 0x80070560 (WIN32: 1376)

> 503.1824.0: 0x80070560 (WIN32: 1376)

> 517.258.0: 0x80070560 (WIN32: 1376)

> 503.2388.0: 0x80070560 (WIN32: 1376)

> 503.2452.0: 0x80070560 (WIN32: 1376)

> CertSrv: Exit Status = The specified local group does not exist. 0x80070560

> (WIN32: 1376)

>

> if anyone has encountered this please let me know.

>

> thanks

>

>

[Guest Jose Luis Cirelli]

CERTSVC_DCOM_ACCESS Group Scope from Universal backDomain Local

 

CERTSVC_DCOM_ACCESS Group Scope from Universal backDomain Local

 

puzzling, yet changing the CERTSVC_DCOM_ACCESS Group Scope from Universal back Domain Local worked also for my Certificate Authority service as well; this kb 903220 is some worrisome technical document