Cannot remove the access control entry object on the object because the ACE isn't present

Hello,
I am very new to using Powershell and Exchange Management Shell, and have no prior experience using either of these tools. However, the software I am installing requires me to use the EMS tool in order to set certain permissions for a user in Exchange, which
will be like the admin account. 
The command I am attempting to run follows as:
Get-ExchangeServer | Remove-ADPermission -User $newusername -Deny -ExtendedRights Receive-As -Confirm:$False 
This throws me an error saying:
cannot remove the access control entry on the object because the ACE isn't present. I've done some research, and have found that this error is quite common, but the solutions do not apply to what I am specifically trying to accomplish. I am simply trying
to remove the Receive-As permission for the admin user that I just created.
Once again, I am very new to Exchange and Powershell, but if there is any advice anyone has, it would greatly appreciated.

I ran this command, and a very long list was displayed, it looks like everything is there.
The weird thing is that I was able to run a previous command which granted Receive-As access to the user I am creating: 
Get-ExchangeServer | Add-ADPermission -User $newusername -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin -Confirm:$False 
The description for the commands to run read to 'grant permissions and to revoke denies, if present'. I'm not sure what this means, but the second part of this pertains to the second command that I am having trouble with:
Get-ExchangeServer | Remove-ADPermission -User $newusername -Deny -ExtendedRights Receive-As -Confirm:$False

Similar Messages

  • Exchange2013 preparead error: "length of the access control list exceed the allowed maximum"

    Hi,
    when when preparing ad (2008) for exchange 2013 installation, I get this error "length of the access control list exceed the allowed maximum"
    after some searh I found this solution on http://support.microsoft.com/kb/973848/en-us
    which consists on the following steps:
    Click Start, click Run, type ldp, and then click OK.
    In the LDP console, click the Connection menu, click Connect, type domain controller name, and then click OK.
    On the Connection menu, click Bind, type the credentials of the domain administrator, and then click OK.
    On the View menu, click Tree.
    In BaseDN drop-down list, select the appropriate domain context, such as "DC=Contoso,DC=com," and then click OK.
    In the tree view, under DC=<var><domainname></var>,DC=com, locate to the object "CN=Microsoft Exchange System objects,DC=<var><domainname></var>,DC=com".
    Right-click the object in step 6, click Advanced, select Security Descriptor, make sure that the SACL option and the "Text dump" option are
    unchecked and then click OK. 
    This will open a new window with security descriptor details
    In this security descriptor Window, click to select the DACL check box.
    In the middle pane of the Security descriptor Window, select and delete all the access control entries (ACEs) that have “\0ADEL:” in the Trustee column. Multiple ACEs can be selected and then click Delete
    ACE to delete them.
    Close the security descriptor as soon as you delete the corresponding ACE's
    Close the LDP console.
    Force Domain Controller replication.
    Rerun Exchange setup and it will install successfully
    But I didn't find the object ""CN=Microsoft Exchange System objects" since I've removed it before the preparation!!!
    Can anyone help please to solve this issue??
    Thanks

    Hi,
    Please make sure all the access control entries (ACEs) that have “\0ADEL:” in the Trustee column have been deleted in the 'Microsoft Exchange security objects' OU. Also make sure the permissions are not inherited by the root domain
    so go to properties of the domain.com, If there are any unknown accounts listed in ACLs, remove all of them.
    Then follow your original posting of step 10 to 13 to rerun Exchange setup to have a try.
    Thanks,
    Winnie Liang
    TechNet Community Support

  • The 'Access-Control-Allow-Origin' header contains multiple values '*, *', but only one is allowed. Origin 'null' is therefore not allowed access.

    Hello. I added custom http response headers to my SP site web config file as follows: 
    <httpProtocol>
          <customHeaders>
                 <add name="Access-Control-Allow-Methods" value="POST,GET,OPTIONS" />
          <add name="Access-Control-Allow-Origin" value="*" />
          <add name="Access-Control-Allow-Headers" value="Content-Type,Authorization" />
          </customHeaders>
        </httpProtocol>
    When I try to call any web service, i get these headers two times each: 
    HTTP/1.1 200 OK
    Cache-Control: private, max-age=0
    Transfer-Encoding: chunked
    Content-Type: application/atom+xml;type=entry;charset=utf-8
    Expires: Sat, 01 Mar 2014 19:11:37 GMT
    Last-Modified: Sun, 16 Mar 2014 19:11:37 GMT
    ETag: "3"
    X-SharePointHealthScore: 0
    SPClientServiceRequestDuration: 20
    SPRequestGuid: b4e77d9c-bfc3-a050-493a-ca5d251d1a72
    request-id: b4e77d9c-bfc3-a050-493a-ca5d251d1a72
    X-FRAME-OPTIONS: SAMEORIGIN
    Persistent-Auth: true
    Access-Control-Allow-Methods: POST,GET,OPTIONS
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Headers: Content-Type,Authorization
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    Access-Control-Allow-Methods: POST,GET,OPTIONS
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Headers: Content-Type,Authorization
    MicrosoftSharePointTeamServices: 15.0.0.4569
    Date: Sun, 16 Mar 2014 19:11:37 GMT
    and that gives me error from ajax: The 'Access-Control-Allow-Origin'
    header contains multiple values '*, *', but only one is allowed. Origin 'null' is therefore not allowed access.
    The 'Access-Control-Allow-Origin' header contains multiple values '*, *', but only one is allowed.
     Origin 'null' is therefore not allowed access.
    Any idea???

    Hi Ann,
    Please check whether there are duplicate custom headers in your code.
    Similar issue for your reference:
    http://social.msdn.microsoft.com/Forums/office/en-US/b79b75f4-b46b-46ae-ae29-17a352b6b90b/custom-http-response-headers-for-sp-2013-shown-2-times?forum=sharepointdevelopment 
    Regards,
    Rebecca Tu
    TechNet Community Support

  • Public parts not allowed to be used by the access control list

    hi,
    I have 2 DCs. DC1 and DC2.  I want to use public parts of DC2 in DC1. When I try to do so in in the dependencies tab, I get the following error.
    some public parts are not allowed to be used by the access control list.
    how to resolve this error ?
    Thanks !

    Hi,
    Sorry for the delayed response ....Both ends static routes are added for the connected test interfaces.....
    Regards,
    Mahesh 

  • The photo "IMG_5310.JPG" could not be opened, because the original item cannot be found.

    Each time I open iPhoto or plug in a device and iPhoto automatically opens, the following message appears five times, looking for photos I assume I deleted, perhaps the wrong way. 
    The photo “IMG_5310.JPG” could not be opened, because the original item cannot be found.
    I've searched the computer for the images, but they seem to be permanently deleted.  How do I "reset" iPhoto from looking for these photos and remove this "Alert"?
    Sincerely,
    Mark T

    mark, you are asking about iPhoto on your Mac, right? This is the iPhoto on IOS devices forum - iPads, iPhones, etc. Next time please post your question in the iLIfe iPhoto forum; you will get more help there.
    But to your question. This error message usually occurs, when original image files are missing from your iPhoto library. iPhoto keeps the original images and the edited versions, and when the originals are removed from the iPhoto Library by deleting them from the Finder, then the photos can no longer be edited, exported, printed.
    Does iPhoot open correctly, after the alert appears? Can you work with it, after the alert finishes? Then delete the corresponding edited versions of the missing originals from your iPhoto library. The versions probably will be marked by an exclamation point, when you browse your photos.
    To prevent this from happening again, open the iPhoto "Preferences" > "Advaced" panel and make sure the option "Importing: Copy items to the iPhoto LIbrary" is enabled. Otherwise original files may be stored outside your iPhoto library and you can accidentally delete them and loose valuable photos.
    Regards
    Léonie

  • When I close Photoshop CS6, the following message appears: "Could not save Preferences because the file is locked, you do not have necessary access permissions, or another program is using the file.

    When I quit Photoshop CS6, the following message appears:
    " Could not save Preferences because the file is locked, you do not have necessary access permissions, or another program is using the file. Use the ‘Get Info’ command in the Finder to ensure the file is unlocked and you have permission to access the file. If the problem persists, save the document to a different file or duplicate it in the Finder."
    If I try to change the Workspace in PS6 from Essentials to any other Workspace, the following messsage appears:
    "Could not apply the workspace because the file is locked, you do not have necessary access permissions, or another program is using the file. Use the ‘Get Info’ command in the Finder to ensure the file is unlocked and you have permission to access the file. If the problem persists, save the document to a different file or duplicate it in the Finder."
    I have checked the Sharing and Permissions section of the "Get Info" panel accessed from the Finder and I have set Read and Write Privileges for my user account for Photoshop CS6. System and Admin are also set to Read and Write.
    I have a MacBook Pro with OS X Version 10.9.5 and have all available updates for Photoshop CS6, Lightroom 5 and Bridge CS6.
    I tried uninstalling the program and downloading it again and reinstalling, but nothing changed.
    Can you help?
    Thanks,
    cjpnm

    You may get better help in Photoshop General Discussion
    The Cloud forum is not about using individual programs
    The Cloud forum is about the Cloud as a delivery & install process
    If you will start at the Forums Index https://forums.adobe.com/welcome
    You will be able to select a forum for the specific Adobe product(s) you use
    Click the "down arrow" symbol on the right (where it says All communities) to open the drop down list and scroll
    If FINDER means Mac, read below (and try to give more information when asking a question)
    Mac 10.9.3 workaround https://forums.adobe.com/thread/1489922
    Enable Mac Root User https://forums.adobe.com/thread/1156604
    -more Root User http://forums.adobe.com/thread/879931
    -and more root user http://forums.adobe.com/thread/940869?tstart=0

  • I get this alert when opening iPhoto.  "The photo "4ea09cdb.jpg" could not be opened, because the original item cannot be found." When I select "find photo" library is greyed out.

    I have to either hit cancel about 100 times to allow me to get into iphoto.  I think this may have to do with photos I have edited over time where the original no longer exists but only the .edited.jpg...
    OSX 10.8.2
    iPhoto 9.4.2

    these do not matchup - they can not all be correct
    Yes, I found the Masters file and they all appear to be there...
    Some of the files in question say "The alias “AtlantisPhoto_01_2.jpg” can’t be opened because the original item can’t be found."  when I try to access in the master file.
    It was checked when I went into preferences already.
    It sounds like you have unchecked the copy option sometime and imported photos while it was unchecked that no longer have the originals available on the same path as they were when imported
    We only know what you tell us and answers can only be based on the information you provide
    And whjile you are looking inside the iPhoto library be very careful that you do not make any changes of any sort - there are no user servicable parts in it and any changes can destroy your library
    LN

  • Iphoto wont open,keep getting Alert:The photo IMG_3515.jpg could not be opened,because the original item cannot be found. It opened fine two days ago. Any suggestions? iPhoto 9.3.2

    iphoto wont open,keep getting Alert:The photo IMG_3515.jpg could not be opened,because the original item cannot be found. It opened fine two days ago. Any suggestions? iPhoto 9.3.2

    No changes were made. I saw in one of the threads where someone said to repair the database(which didn't work) or Rebuild the database(which did work). Thanks to one all for the support.
    WP

  • HT201407 I have a new device. When selecting the language and country I am trying to connect to a wifi connection and getting the error 'Your Iphone could not be activated because the activation server cannot be reached. Try connecting to your Iphone to i

    I have a new device. When selecting the language and country I am trying to connect to a wifi connection and getting the error 'Your Iphone could not be activated because the activation server cannot be reached. Try connecting to your Iphone to iTunes to activate it, or try again in a few minutes.

    Where exactly did you get this phone?
    Do you have a SIM in the phone?
    There are 2 primary causes for this.
    Either you don't have a SIM in the phone, which is REQUIRED to activate it, or the phone was hacked to unlock it.

  • I'm getting a notice on my iPad saying...Provisioning Expiration "Lynx Enterprise Release" expires in 3 days...show or remind. Option are verify or remove...which I am hesitant to do because the icon it shows next to it is the one for "settings".

    I'm getting a notice on my iPad saying...Provisioning Expiration "Lynx Enterprise Release" expires in 3 days...show or remind. Option are verify or remove...which I am hesitant to do because the icon it shows next to it is the one for "settings".

    Why is that making you hesitate?  You can't accidentally remove any of the built-in apps, that I'm aware of.

  • Re: how do I solve this alert-The photo "evaluation.jpeg" could not be opened, because the original item cannot be found.

    Re: how do I solve this alert-The photo “evaluation.jpeg” could not be opened, because the original item cannot be found. How do I get rid of the alert so that every time I open iphoto or sync my iphone it will not come up anymore.
    Thanks

    The issue is with iPhoto. When it opens it is looking for a photo that either no longer exists or is misplaced. I would post I the iPhoto forum where those experts are.

  • How do I solve this alert-The photo "evaluation.jpeg" could not be opened, because the original item cannot be found.

    it happened when I did an update on the iphoto
    how do I solve this
    alert-The photo “evaluation.jpeg” could not be opened, because the original item cannot be found.

    The issue is with iPhoto. When it opens it is looking for a photo that either no longer exists or is misplaced. I would post I the iPhoto forum where those experts are.

  • "The photo "EGY_7895.jpg" could not be opened, because the original item cannot be found"

    I'm getting the following message when I click on any photo in my most recent import: "The photo “xxx.jpg” could not be opened, because the original item cannot be found". The thumbnails are in iphoto but it dosen't seems to reconize the files when I try to go in to edit. I have iphoto version 8.1.2. Help please.

    Are you running a Managed or a Referenced Library?
    A Managed Library, is the default setting, and iPhoto copies files into the iPhoto Library when Importing. The files are then stored in the Library package
    A Referenced Library is when iPhoto is NOT copying the files into the iPhoto Library when importing because you made a change at iPhoto -> Preferences -> Advanced. (You unchecked the option to copy files into the Library on import) The files are then stored where ever you put them and not in the Library package. In this scenario you are responsible for the File Management. 
    It sounds like this batch of photos were imported as Referenced.
    Regards
    TD

  • [svn] 4932: Fixed RTE with FxAnimate3DInstance, where a check in a superclass on whether the property was a style didn' t succeed because the effect was using properties that weren' t actually styles or properties on the object.

    Revision: 4932
    Author: [email protected]
    Date: 2009-02-11 15:29:32 -0800 (Wed, 11 Feb 2009)
    Log Message:
    Fixed RTE with FxAnimate3DInstance, where a check in a superclass on whether the property was a style didn't succeed because the effect was using properties that weren't actually styles or properties on the object. Fine for the effect, but not for the superclass. Fix was to simply stub out the style check.
    QE Notes:
    Doc Notes: None
    Bugs: SDK-19256
    Reviewer: Ely
    tests: checkintests, Mustella mx/effects/FxRotate3D
    Ticket Links:
    http://bugs.adobe.com/jira/browse/SDK-19256
    Modified Paths:
    flex/sdk/branches/i10/frameworks/projects/flex4/src/mx/effects/effectClasses/FxAnimate3DI nstance.as

    Revision: 4932
    Author: [email protected]
    Date: 2009-02-11 15:29:32 -0800 (Wed, 11 Feb 2009)
    Log Message:
    Fixed RTE with FxAnimate3DInstance, where a check in a superclass on whether the property was a style didn't succeed because the effect was using properties that weren't actually styles or properties on the object. Fine for the effect, but not for the superclass. Fix was to simply stub out the style check.
    QE Notes:
    Doc Notes: None
    Bugs: SDK-19256
    Reviewer: Ely
    tests: checkintests, Mustella mx/effects/FxRotate3D
    Ticket Links:
    http://bugs.adobe.com/jira/browse/SDK-19256
    Modified Paths:
    flex/sdk/branches/i10/frameworks/projects/flex4/src/mx/effects/effectClasses/FxAnimate3DI nstance.as

  • Subordinate certification authority can't start ADCS service: The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).

    Hi
    I have 1 rootCA and 1 subordinate CA. I removed one of the locations to publish CRL and after that the ADCS service can't start. I get the warning first:
    Revocation status for a certificate in the chain for CA certificate 2 for siu-SRVDC01-CA could not be verified because a server is currently unavailable.  The revocation function was unable to check revocation because the revocation server was offline.
    0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).
    And then the error:
    Active Directory Certificate Services did not start: Could not load or verify the current CA certificate.  siu-SRVDC01-CA The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).
    I've read many threads with similar problems but I can't find the solution. The CDP is online. I've run "certutil -url cert.cer" to verify the CDP and AIA and everything is fine. But the service is still not starting.
    See this command too:
    C:\>certutil -verify -urlfetch subCADC01.cer
    Issuer:
        CN=siu-SRVDC02-CA
        DC=siu
        DC=domain
      Name Hash(sha1): 152a7c43f186d9179c1c3256d3a1a0af4a9df892
      Name Hash(md5): b409e417a38bbe04b5800512bd94efac
    Subject:
        CN=siu-SRVDC01-CA
        DC=siu
        DC=domain
      Name Hash(sha1): 5ee421b84c3b18ff134cf2e42226853d78d3409b
      Name Hash(md5): e1a454692361733e45dad374dc14cae3
    Cert Serial Number: 1e0000022c707c76c0a27b315700000000022c
    dwFlags = CA_VERIFY_FLAGS_CONSOLE_TRACE (0x20000000)
    dwFlags = CA_VERIFY_FLAGS_DUMP_CHAIN (0x40000000)
    ChainFlags = CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT (0x40000000)
    HCCE_LOCAL_MACHINE
    CERT_CHAIN_POLICY_BASE
    -------- CERT_CHAIN_CONTEXT --------
    ChainContext.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
    ChainContext.dwRevocationFreshnessTime: 1 Hours, 2 Minutes, 16 Seconds
    SimpleChain.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
    SimpleChain.dwRevocationFreshnessTime: 1 Hours, 2 Minutes, 16 Seconds
    CertContext[0][0]: dwInfoStatus=102 dwErrorStatus=0
      Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
      NotBefore: 19.03.2015 11:18
      NotAfter: 19.03.2017 11:28
      Subject: CN=siu-SRVDC01-CA, DC=siu, DC=domain
      Serial: 1e0000022c707c76c0a27b315700000000022c
      Template: SubCA
      a1a8a95464c5b586da6e9b304142d59fc5a22ae0
      Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
      Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
      ----------------  Certificate AIA  ----------------
      Verified "Certificate (0)" Time: 0
        [0.0] http://wwwca/CertEnroll/srvdc02.siu.domain_siu-SRVDC02-CA.crt
      ----------------  Certificate CDP  ----------------
      Verified "Base CRL (26)" Time: 0
        [0.0] http://sharepoint.siu.no:8088/siu-SRVDC02-CA.crl
      ----------------  Base CRL CDP  ----------------
      No URLs "None" Time: 0
      ----------------  Certificate OCSP  ----------------
      No URLs "None" Time: 0
        CRL 26:
        Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
        ThisUpdate: 19.03.2015 11:10
        NextUpdate: 15.09.2015 23:30
        e2ee543a68214f9b99dda2e9f58b1ddfc34429d1
    CertContext[0][1]: dwInfoStatus=10c dwErrorStatus=0
      Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
      NotBefore: 23.09.2011 13:00
      NotAfter: 23.09.2021 13:10
      Subject: CN=siu-SRVDC02-CA, DC=siu, DC=domain
      Serial: 60fc459ebdefa5b646a081b0c21c259d
      4ea8bb95b0038c69a83c939e8a54f892cd0b5056
      Element.dwInfoStatus = CERT_TRUST_HAS_NAME_MATCH_ISSUER (0x4)
      Element.dwInfoStatus = CERT_TRUST_IS_SELF_SIGNED (0x8)
      Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
      ----------------  Certificate AIA  ----------------
      No URLs "None" Time: 0
      ----------------  Certificate CDP  ----------------
      No URLs "None" Time: 0
      ----------------  Certificate OCSP  ----------------
      No URLs "None" Time: 0
    Exclude leaf cert:
      691f7e42f5c4a86d03b7225bf7303369ef6dcc7e
    Full chain:
      17e5b9477a1736c33dc0ff245e7b06de5b958c4c
    Verified Issuance Policies: None
    Verified Application Policies: All
    Cert is a CA certificate
    Leaf certificate revocation check passed
    CertUtil: -verify command completed successfully.
    Any clue?

    It looks like it is trying to get the CRL using LDAP. It is quite strange since no ldap entry is on the subordinate CA,
    only an HTTP address:
              <CertificateRevocationList location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?certificateRevocationList?base?objectClass=cRLDistributionPoint"
    fileRef="DEEB557897A9FEA217DF83D95BF24CA54051B1CF.crl" issuerName="siu-SRVDC02-CA" />
                <CertificateRevocationList deltaCRL="true" location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?deltaRevocationList?base?objectClass=cRLDistributionPoint" 
    I have checked that object using adsi Edit and the permissions seem ok. Also there is a value on both attributes: certificateRevocationList and deltaRevocationList.
    This problem happened after I removed the LDAP entry for the "CRL Distribution point" from the sub CA properties. Should I add back the LDAP entry?
    Log Name:      Microsoft-Windows-CAPI2/Operational
    Source:        Microsoft-Windows-CAPI2
    Date:          19.03.2015 14:42:07
    Event ID:      11
    Task Category: Build Chain
    Level:         Error
    Keywords:      Path Discovery,Path Validation
    User:          SYSTEM
    Computer:      srvdc01.siu.domain
    Description:
    For more details for this event, please refer to the "Details" section
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" />
        <EventID>11</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>11</Task>
        <Opcode>2</Opcode>
        <Keywords>0x4000000000000003</Keywords>
        <TimeCreated SystemTime="2015-03-19T13:42:07.481533500Z" />
        <EventRecordID>131</EventRecordID>
        <Correlation />
        <Execution ProcessID="6288" ThreadID="5472" />
        <Channel>Microsoft-Windows-CAPI2/Operational</Channel>
        <Computer>srvdc01.siu.domain</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <UserData>
        <CertGetCertificateChain>
          <Certificate fileRef="E02AA2C59FD54241309B6EDA86B5C56454A9A8A1.cer" subjectName="siu-SRVDC01-CA" />
          <ExtendedKeyUsage />
          <Flags value="40000000" CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT="true" />
          <ChainEngineInfo context="machine" />
          <CertificateChain chainRef="{60B61582-1C3C-4B58-AE8C-70278ADEE402}" revocationFreshnessTime="P2DT21H13M20S">
            <TrustStatus>
              <ErrorStatus value="1000040" CERT_TRUST_REVOCATION_STATUS_UNKNOWN="true" CERT_TRUST_IS_OFFLINE_REVOCATION="true" />
              <InfoStatus value="100" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
            </TrustStatus>
            <ChainElement>
              <Certificate fileRef="E02AA2C59FD54241309B6EDA86B5C56454A9A8A1.cer" subjectName="siu-SRVDC01-CA" />
              <SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" />
              <PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" />
              <TrustStatus>
                <ErrorStatus value="1000040" CERT_TRUST_REVOCATION_STATUS_UNKNOWN="true" CERT_TRUST_IS_OFFLINE_REVOCATION="true" />
                <InfoStatus value="102" CERT_TRUST_HAS_KEY_MATCH_ISSUER="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
              </TrustStatus>
              <ApplicationUsage any="true" />
              <IssuanceUsage />
              <RevocationInfo freshnessTime="P2DT21H13M20S">
                <RevocationResult value="80092013">The revocation function was unable to check revocation because the revocation server was offline.</RevocationResult>
                <StrongSignProperties signHash="RSA/SHA1" issuerPublicKeyLength="2048" />
                <DeltaStrongSignProperties signHash="RSA/SHA1" issuerPublicKeyLength="2048" />
                <CertificateRevocationList location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?certificateRevocationList?base?objectClass=cRLDistributionPoint"
    fileRef="DEEB557897A9FEA217DF83D95BF24CA54051B1CF.crl" issuerName="siu-SRVDC02-CA" />
                <CertificateRevocationList deltaCRL="true" location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?deltaRevocationList?base?objectClass=cRLDistributionPoint"
    fileRef="58A2CDBC7A238DDD76EEFEDE354A04596F5AED71.crl" issuerName="siu-SRVDC02-CA" />
              </RevocationInfo>
            </ChainElement>
            <ChainElement>
              <Certificate fileRef="56500BCD92F8548A9E933CA8698C03B095BBA84E.cer" subjectName="siu-SRVDC02-CA" />
              <SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" />
              <PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" />
              <TrustStatus>
                <ErrorStatus value="0" />
                <InfoStatus value="10C" CERT_TRUST_HAS_NAME_MATCH_ISSUER="true" CERT_TRUST_IS_SELF_SIGNED="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
              </TrustStatus>
              <ApplicationUsage any="true" />
              <IssuanceUsage any="true" />
            </ChainElement>
          </CertificateChain>
          <EventAuxInfo ProcessName="certsrv.exe" />
          <CorrelationAuxInfo TaskId="{54E4FCD3-E70A-4024-BB81-6A053EAACE21}" SeqNumber="9" />
          <Result value="80092013">The revocation function was unable to check revocation because the revocation server was offline.</Result>
        </CertGetCertificateChain>
      </UserData>
    </Event>

Maybe you are looking for