Move CA problem

HEllo

We were using the microsoft pki on windows 2000. I have a CA installed on W2K standard domain controller of my forest the pki is used for l2tp vpn conx and eap/tls wifi. This server is CD1.
I upgraded the forest to W2K3 and now i have 2 new domaine controllers GC1 & GC2 with W2K3 sp1 standard edition, and the old DC upgraded from W2K sp4 to W2K3 sp1 standard edition.
Since i upgraded to W2K3 sp1 our CA DC1 server, the autoenrollement do not work anymore. I saw on the web, that sp1 could be the reason of my problem. On the post they propose to uninstall an reinstall.
I have a lot of vpn users wich are always at home, so i preffer to add a new CA on our W2K and add manually the different certificates, since i did that, it is the mess, and i have a lot of problems/errors.
autoenrollement ditribute computers certificates to some computers not to all the computers of the same OU.
from the certificate mmc of any computer with any user of the domain (even with the administrator of the domain) i cannot ask an ipsec certificate from.
Domain controllers did'nt reeive automatically DC certificates...

Is there a a documentation somewhere whic can help me solve this mess ?

Thks
F
.

Relevant Pages

  • Re: Move CA problem
    ... I have a CA installed on W2K standard domain controller of my forest the pki is used for l2tp vpn conx and eap/tls wifi. ... I have a lot of vpn users wich are always at home, so i preffer to add a new CA on our W2K and add manually the different certificates, since i did that, it is the mess, and i have a lot of problems/errors. ... autoenrollement ditribute computers certificates to some computers not to all the computers of the same OU. ...
    (microsoft.public.win2000.security)
  • Re: Domain Password Security
    ... accounts need to use complex passwords and minimum of ntlmv2 should be used for lan ... Services Client and configuring authentication level on Domain Controller Security ... controllers if you have all W2K/XP computers. ... I also recommend you enable auditing of account logon and logon ...
    (microsoft.public.win2000.security)
  • Re: Domain Password Security
    ... Domain Controller Security ... >controllers if you have all W2K/XP computers. ... >administrator accounts only when needed to, ... account logon and logon ...
    (microsoft.public.win2000.security)
  • Re: Custom rights
    ... I don't know the specific answer to that offhand as I don't have Exchange ... >> By default any user can log onto a server other than domain controller. ... >> To add computers to the domain go to AD Users and Computers. ... >> not work on privileged groups such as administrators. ...
    (microsoft.public.win2000.security)
  • Re: The name could not be resolved
    ... On a domain controller, ... question, and check Exchange General to see what server they're on, and you ... >> Its possible that the Global Catalog server that Outlook is hitting to ... Connect via Active Directory Users and Computers and connect ...
    (microsoft.public.exchange.admin)