topic Could you please tell me is in Network Access Control

Unable to get machine certificates from MS CA for Win 7 machines

sdoherty — Mon, 11 Mar 2019 05:25:50 GMT

I am trying to issue certificates to Windows 7 clients for machine certificate access though ISE. I am able to receive the certificate on my Windows 8 clients but the Windows 7 clients receive ;

Logon failure:the user has not been granted the requested logon at this computer.

I am using windows MMC and also I am using the same AD account on both machines. I am just unable to get the certificates on the Win 7 machines.

Could you please tell me is

Ravi Singh — Mon, 09 Feb 2015 18:13:27 GMT

Could you please tell me is it for one client or you are facing issue for all the win7 client.

Who is issuing the

nspasov — Tue, 10 Feb 2015 02:24:40 GMT

Who is issuing the certificates? Like Microsoft CA or some other PKI solution?

Thank you for rating helpful posts!

It is a MS CA.

sdoherty — Tue, 10 Feb 2015 13:00:41 GMT

It is a MS CA.

Hmm, I am guessing you are

nspasov — Tue, 10 Feb 2015 18:47:27 GMT

Hmm, I am guessing you are issuing certificates via GPO and auto-enrollment. I would suggest you check and make sure that the Windows Machines are not being blocked by an access list. I would also suggest that you check the permissions for the auto-enrollment and ensure that the the Windows Machines and their security group have the proper permissions to grab a certificate.

If none of this helps, you will need to reach to Microsoft support and/or their online community.

Thank you for rating helpful posts!