Introduction
I was following a guide on how to create a custom location of the crl and got stuck when trying to publish the CRL, the error is Access is denied 0x80070005. Apparently even my CA has full control of the directory and NTFS permission the publishing is denied. It turns out that I need to locate the CRL onto another server other than the CA itself.
for this I decided to store the CRL onto a DC.
Creating a folder for storing CRL on DC
I would need to set the sharing permission and NTFS permission for this.





Adding CRL extension to point to the new folder that stores CRL
Click on the Add button, and type in file://DC01/crldist$/
then insert CAName, CRLNameSuffix, DeltaCRLAllowed
, and at the end type in .crl
. Select Publish CRLs to this location and Publish Delta CRLs to this location.
Restart the CA service and publish.
you have got to be kidding me! you cant publish a crl to the ca? Microsoft, get it together!