Share via

How to fix Error 0x800706ba (RPC) on the client side?

Joshua D. Engracia 0 Reputation points
2025-08-28T03:57:50.41+00:00

Hi Microsoft Community,

Good day!

As part of our security, we tried to Enable the "Restrict Unauthenticated RPC clients" (Computer Configuration > Administrative template > System > Remote Procedure Call) and set it to "Authenticated without exceptions" on Local Group Policy Editor on our Active Directory Server.

However, when we tried to do a Certificate registration on the client side, we encountered the error 0x800706ba as mentioned here: https://learn.microsoft.com/en-us/troubleshoot/windows-server/certificates-and-public-key-infrastructure-pki/error-0x800706ba-certificate-enrollment

Is there any way we can have an exclusion of this policy for selected client's machine only? Can we utilize the "Authenticated" option?

Windows for business | Windows Server | Directory services | Deploy group policy objects
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Quinnie Quoc 7,400 Reputation points Independent Advisor
    2025-08-28T08:41:46.02+00:00

    Hi Joshua D. Engracia,

    Thank you for reaching out to the Microsoft Community. We understand your need to strengthen RPC security by enabling “Restrict Unauthenticated RPC clients” with the “Authenticated without exceptions” setting. However, as you've observed, this configuration can interfere with certificate enrollment processes, resulting in error 0x800706ba.

    To allow certificate registration while maintaining security, we recommend switching the policy setting to “Authenticated” instead of “Authenticated without exceptions.” This option still enforces authentication but permits exceptions for certain RPC interfaces that explicitly request unauthenticated access. It offers a more flexible balance between security and functionality.

    Unfortunately, this policy cannot be scoped per client machine directly through Group Policy. Instead, you may consider applying the policy at the OU level or using WMI filters to target specific systems if granular control is needed.

    Let us know if you’d like assistance implementing these changes or reviewing your certificate services configuration.

    Best regards,

    Quinnie Quoc.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.