Automatic certificate enrollment for local system failed (0x800706ba) The RPC server is unavailable.

Problem: Direct Access server Windows 2012 R2 can not get a certificate: Automatic certificate enrollment for local system failed (0x800706ba) The RPC server is unavailable.

Symptoms: certutil ping works on IP, but not on server name.

C:\Windows\system32>certutil -ping -config dc1
Connecting to dc1 ...
Server could not be reached: The RPC server is unavailable. 0x800706ba (WIN32: 1
722 RPC_S_SERVER_UNAVAILABLE) -- (32ms)

CertUtil: -ping command FAILED: 0x800706ba (WIN32: 1722 RPC_S_SERVER_UNAVAILABLE
)
CertUtil: The RPC server is unavailable.

C:\Windows\system32>certutil -ping -config 192.1.1.124
Connecting to 192.1.1.124 ...
Server "xxx" ICertRequest2 interface is alive (109ms)
CertUtil: -ping command completed successfully.

Resolution: http://blogs.technet.com/b/isablog/archive/2007/05/16/rpc-filter-and-enable-strict-rpc-compliance.aspx