Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 2025939 - Last Review: June 25, 2010 - Revision: 6.0
Error "The selected user has no certificates suitable for Encrypted File System Recovery and cannot be added as a recovery agent" attempting to designate a Recovery Agent for the domain
The Add Recovery Agent Wizard is unable to find the certificate because it is not published in Active Directory. Use the following steps to resolve the issue:
- Log on using an account with administrative rights to the Certificate Authority.
- Click Start, select Run, and type certtmpl.msc to open the Certificate Templates snap-in.
- Right-click on the certificate templates and select Manage.
- On the General tab, check Publish certificate in Active Directory if it is not selected.
- Restart the Certificate Services service from the Services snap-in or using the command net stop certsvc & net start certsvc.
You should now be able to add the user with the Add Recovery Agent Wizard.
For more information about adding a Recovery Agent, see the following Microsoft website:
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See
Terms of Use
(http://go.microsoft.com/fwlink/?LinkId=151500)
for other considerations.
APPLIES TO
- Microsoft Windows Server 2003 Service Pack 2
- Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate