Unable to get machine certificates from MS CA for Win 7 machines

[sdoherty]

I am trying to issue certificates to Windows 7 clients for machine certificate access though ISE.  I am able to receive the certificate on my Windows 8 clients but the Windows 7 clients receive ;

Logon failure:the user has not been granted the requested logon at this computer.

I am using windows MMC and also I am using the same AD account on both machines.  I am just unable to get the certificates on the Win 7 machines.

[Ravi Singh]

Could you please tell me is it for one client or you are facing issue for all the win7 client.

[sdoherty]

It is a MS CA.  

[nspasov]

Hmm, I am guessing you are issuing certificates via GPO and auto-enrollment. I would suggest you check and make sure that the Windows Machines are not being blocked by an access list. I would also suggest that you check the permissions for the auto-enrollment and ensure that the the Windows Machines and their security group have the proper permissions to grab a certificate. 

If none of this helps, you will need to reach to Microsoft support and/or their online community. 

Thank you for rating helpful posts! 

[nspasov]

Who is issuing the certificates? Like Microsoft CA or some other PKI solution?

Thank you for rating helpful posts!