Automatic certificate enrollment for local system failed

Hello,

I am running Windows 2003 R2 SP2 for my primary domain controller. I am

getting this error:

Event Type: Error

Event Source: AutoEnrollment

Event Category: None

Event ID: 13

Date: 8/11/2008

Time: 1:47:11 AM

User: N/A

Computer: DC01

Description:

Automatic certificate enrollment for local system failed to enroll for one

Domain Controller certificate (0x80070005). Access is denied.

My CA is on a domain controller from win2000 to windows 2003 R2 SP2.

I have read that I need to add the Domain Controllers group to the

CERTSVC_DCOM_ACCESS group and reboot. Has anyone had any experience with this

or can confirm this is what I need to do? Is it safe for me to add the domain

controllers to this group?

thanks in advance....