Log on to the CA machine as a domain or enterprise admin.
Go to the %windir%\System32\CertSrv\CertEnroll directory.
There should be one file with the .crt extension, but without any
parenthesized index just before the .crt extension.
For example, "foo.crt" -- not "foo(3).crt" and not "foo(1-3).crt".
Run the following command to manually publish it to the NtAuth store:
certutil -dspublish foo.crt NtAuthCA
Vishal Agarwal [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights