Hi,
I am trying to enable logging for Certificate Services Network Device Enrollment Service (NDES). I am following the instructions in the book "Windows Server 2008 PKI and Certificate Security" on page 694.
As the instructions indicated, I logged in once as the service account we are using for NDES in order to create a local profile. Next, I logged in as myself (I am in the local administrators group) and opened a command prompt as an administrator and typed the following command:
certutil -setreg debug 0xffffffe3
The output of the command was:
CertUtil: -setreg command FAILED: 0x80070002 (WIN32: 2)
CertUtil: The system cannot find the file specified.
According to the book, this should have created a file named C:\Users\ServiceAccount\Mscep.log
Can anyone advise?