Re: Certificates are not published

From: Paul Adare (padare_at_newsguy.com)
Date: 10/18/05 

Date: Tue, 18 Oct 2005 04:33:11 -0400

In article <e$Syvc70FHA.2884@TK2MSFTNGP09.phx.gbl>, in the
microsoft.public.windows.server.security news group, Carma Trepp
<only_n_groups_account_but_works@yahoo.de> says...

> Brian Komar [MVP] wrote:
>
> > In addition, there are two other possibilities.
> > - See KB 281271 - Certification Authority configuration to publish
> > certificates in Active Directory of trusted domain
> >
> > If the CA is in a different domain than the user's domain, it will not
> > have the necessary permissions to publish the certificate. The KB
> > article states what needs to be done.
> >
> > Brian
>
> No CA specific errors are in the eventlog.
> We have only one domain, and the CA is on one of the two DC`s. I really
> think the CA have enough rights. The CA is also in the Cert Publishers
> group.

You've checked both the client and CA event logs? Have you actually
configured the templates to publish in AD? What certificate templates
are you using? What OS (Standard, Enterprise, etc.) are you running on
the CA? 

-- 
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern 
computer geeks finds it impossible to detect a joke that is not clearly 
labeled as such."
Ray Shea

Relevant Pages

  • Re: Where to View Machine Certificate?
    ... microsoft.public.windows.server.security news group, Brian Komar ... certificate is for EFS. ... Paul Adare - MVP Virtual Machines ...
    (microsoft.public.windows.server.security)
  • Re: Help with loading PKI certificate
    ... microsoft.public.security news group, steve fujii ... > know how to load a new certificate to the certificate ... You might have better luck asking in a Mac news group. ...
    (microsoft.public.security)
  • Re: Enterprise Certificate Authority question
    ... microsoft.public.win2000.security news group, Miha Pihler <mihap- ... > certificate. ... this is not a reliable way to determine which server is ...
    (microsoft.public.win2000.security)
  • Re: Smart Cards?
    ... microsoft.public.security news group, Steven L Umbach <n9rou@nospam- ... A certificate contains (amongst a ... number of other things) the public key, a public key is not commonly ...
    (microsoft.public.security)
  • Re: Windows 2003 - Child domain cannot request certificate from root domain
    ... The main thing is that you have to modify the permissions on the certificate templates you wish to issue. ... After following the Certificate Request Wizard in the MMC Certificate ...
    (microsoft.public.windows.server.security)