Automatic certificate enrollment for %1 failed to contact the active directory (%2). %3 Enrollment will not be performed.

Autoenrollment starts every time Group Policy is updated or when a user logs on to Windows. Each time autoenrollment starts, it tries to contact the Active Directory directory service. This event, Autoenrollment 15, is logged when autoenrollment fails to contact Active Directory. If the computer cannot contact Active Directory, for example when a laptop computer is not connected to the corporate network, this event appears in the Event Viewer. This is expected and normal.

If the computer does not currently have connectivity to Active Directory, then no user action is required. If the event is repeatedly generated after the computer has established a connection to Active Directory, verify that the computer can receive Group Policy updates by using the Gpupdate.exe command-line utility. For more information about the Gpupdate.exe command-line utility, see Help and Support.