Setup could not add the Certification Authority's computer account to the Pre-Windows 2000 Compatible Access security group. ...

Setup could not add the Certification Authority's computer account to the Pre-Windows 2000 Compatible Access security group. Certificate Managers Restrictions feature will not work correctly on this Certification Authority. To fix this, an administrator must manually add the Certification Authority's computer account to the Pre-Windows 2000 Compatible Access security group in Active Directory.