Forum Discussion
NgcSet stays NO despite working WHFB setup - RPC 0x800706ba error
Hi everyone, I need help with a Windows Hello for Business certificate trust deployment that's almost working but stuck on the final step. **What's Working:** - Manual certificate enrollment works...
Consider below:
Fix DCOM/RPC Permissions
- Add NT AUTHORITY\Authenticated Users to Certificate Service DCOM Access
- Ensure Remote Activation permissions are granted via dcomcnfg
Restart NgcSvc and Dependencies
Run these commands in an elevated PowerShell:
sc config NgcSvc start= demand
sc start NgcSvcAlso verify:
Get-Service -Name RpcSs, DcomLaunch, NgcSvc | Format-Table Name, Status, StartType
Check Autoenrollment Triggers
Use certutil -user -pulse and certutil -pulse to manually trigger autoenrollment in both contexts.
Event Viewer & Logs
Check Event ID 10027 in the System log on the CA for DCOM permission issues. Also look for Event ID 82 in the Application log for autoenrollment failures.
