Re: Group Policy for Computer Certificates

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 08/05/04 

Date: Thu, 5 Aug 2004 05:16:15 -0700

I thought that in windows server 2003 and XP GPO, you no longer have to
specify a CA in the ACRS settings. Have you made sure thr "computer"
template is available on the enterprise root CA? 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Andrew Mitchell" <amitchell@removecasey.vic.gov.au> wrote in message
news:Xns953BEBA3EC27Dcasey01@207.46.248.16...
> Hi,
> I'm attempting to get auto distribution of computer certificates working
in a
> lab environment.
> I have a Win2003 (standard) DC with the enterprise root CA installed,
which
> appears to be working OK. It has managed to assign the domain controller
> certificate to itself. This is the only server in the lab. There are no
> intermediate CA's.
>
> Where I'm having a problem is in using group policy to distribute computer
> certificates to client PC's. When creating the group policy and running
the
> Automatic Certificate Request Setup Wizard I select Computer certificate,
but
> then on the next screen there are no CA's to choose from.
>
> Is this indicative of the CA not being published in AD and, if so, does
> anyone know a way to get it to publish? The only other thing I can think
of
> is that the CA is not setup as an 'issuing' CA, but I can't find any way
to
> specify this.
>
> Any assistance would be appreciated.
>
> TIA
> Andy.

Relevant Pages

  • Re: Group Policy for Computer Certificates
    ... I thought that in windows server 2003 and XP GPO, ... specify a CA in the ACRS settings. ... > I'm attempting to get auto distribution of computer certificates working ... > Automatic Certificate Request Setup Wizard I select Computer certificate, ...
    (microsoft.public.windows.server.security)
  • Re: What to do with certificates when profile is deleted/recreated?
    ... Best Practices for implementing Windows Server 2003 PKI: ... Troubleshooting Certificate Status and Revocation whitepaper: ... Windows Server 2003 web enrollment and troubleshooting guide: ... roaming user profiles ...
    (microsoft.public.windows.server.security)
  • Re: Isolation of the Root CA
    ... Windows Server 2003 web enrollment and troubleshooting guide: ... Best Practices for implementing Windows Server 2003 PKI: ... Troubleshooting Certificate Status and Revocation whitepaper: ... >>> standalone root CA and use it to issue a certificate for an Enterprise ...
    (microsoft.public.win2000.security)
  • Re: installing an offline root CA
    ... Windows Server 2003 PKI Operations Guide ... Managing a Windows Server 2003 Public Key Infrastructure ... Best Practices for Implementing a Microsoft Windows Server 2003 Public Key ... Implementing and Administering Certificate Templates in Windows Server 2003 ...
    (microsoft.public.security)
  • Re: Domain certificate error
    ... Certificate Autoenrollment in Windows Server 2003Supported Hardware ... Install Windows Server 2003 CAHow can I install the Certificate Authority ...
    (microsoft.public.windows.server.active_directory)