Enterprise CA on a domain controller

From: rav (ravburano_at_hotmail.com)
Date: 02/21/04 

Date: Sat, 21 Feb 2004 10:25:07 -0000

Hi,

Do you have to run an Enterprise CA on a DC for autoenrolment to work? I
have read MS articles that state you have to and I have read other MS
articles that state you should never install a CA on a DC even if it is
technically possible to do so.

The only thing I can clearly see is that you must have at least a DC running
2000 with sp3. But I assume that is for the AD schema only and it does not
mean you must run a CA on a DC.

So please please tell me I do not have to run my CA on a DC for
autoenrolment to function for both user and computer certs.

Thanks

Relevant Pages

  • Re: Enterprise CA on a domain controller
    ... > Do you have to run an Enterprise CA on a DC for autoenrolment to work? ... > have read MS articles that state you have to and I have read other MS ... You do not have to run the enterprise CA on a DC. ... A certificate template that enables the Read, Enroll, and Autoenroll ...
    (microsoft.public.windows.server.security)
  • Re: Old spaceship modelling book
    ... "Famous Spaceships of Fact and Fantasy, 2nd Edition", edited by Terry ... Spohn, published by Kalmbach Publishing, 1996, ISBN 0-89024-563-0. ... The second edition dropped the articles on the Space: ... Enterprise 1701. ...
    (rec.models.scale)
  • Re: Enterprise CA on a domain controller
    ... >> Do you have to run an Enterprise CA on a DC for autoenrolment to work? ... > 3) A certificate template that enables the Read, Enroll, and Autoenroll ...
    (microsoft.public.windows.server.security)
  • Re: Importing diagram from Active directory
    ... >I see many articles that say that it is possible to use the visio ... > MSDE and I have installed the Enterprise Network Tools. ... Prev by Date: ...
    (microsoft.public.visio.troubleshoot)
  • NTAUTH Store
    ... Can anyone tell me how to import a Certificate into the NTAUTH Store without ... installing an Enterprise CA? ... I've tried the KB Articles but nothing is ...
    (microsoft.public.windows.server.security)