After you enable automatic enrollment for certificates in an Active Directory domain environment, automatic enrollment occasionally fails on a Windows Vista-based client computer. Therefore, the client computer cannot obtain certificates automatically.

When this problem occurs, an event that resembles the following is logged in the Application log on the client computer:

Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 13
Date: Date
Time: Time
User: N/A
Computer: Computer
Description:
Automatic certificate enrollment for Local system failed to enroll the CertType certificate from CA-name (The RPC server is unavailable. 0x800706ba (WIN32: 1722)).

If you run the ipconfig /displaydns command on the client computer to display the content of the DNS resolver cache, the command output indicates that a negative DNS cache entry was created for the NetBIOS name of the certification authority (CA) server.

This problem occurs when the client computer is configured to use multiple DNS suffixes.