Re: Win2K3 CA, web cert request problem

From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Tue, 27 Jun 2006 12:33:16 -0500

The user would need to be in a global group that has read and enroll
permissions for the certificate template. The link below supplies more
details. --- Steve

http://technet2.microsoft.com/WindowsServer/en/Library/c25f57b0-5459-4c17-bb3f-2f657bd23f781033.mspx?mfr=true

"Pierre Bru" <Pierre.Bru@xxxxxxxxxxxx> wrote in message
news:eHL2NcSmGHA.3880@xxxxxxxxxxxxxxxxxxxxxxx

hi,

I created a company CA. when a user not in Domain Users try to ask for a
cert, the web service refuse his/her connection

is there a workaround ?

TIA,
Pierre.

References:
- Win2K3 CA, web cert request problem
  - From: Pierre Bru

Prev by Date: Re: removing user from domain users group doesn't help
Next by Date: Re: View effective permissions
Previous by thread: Win2K3 CA, web cert request problem
Next by thread: 802.1x host auth fails with WinXP supplicant
Index(es):
- Date
- Thread

Relevant Pages

Re: Certificate Template
... generally this is cause by incorrect permissions, you need to allow permissions for the Read, Enroll, and Auto-enroll permissions. ... I have created a Certificate Template on root DC. ...
(microsoft.public.windows.server.active_directory)
Re: Windows 2003 - Child domain cannot request certificate from root domain
... replication configuration for the windows network? ... permissions on the certificate template you want to use. ... domain to request certificates from the CA> ...
(microsoft.public.windows.server.security)
Re: Windows 2003 - Child domain cannot request certificate from root domain
... replication configuration for the windows network? ... permissions on the certificate template you want to use. ... domain to request certificates from the CA> ...
(microsoft.public.windows.server.security)
Re: Windows 2003 - Child domain cannot request certificate from root domain
... you'll find your child domain controllers. ... permissions on the certificate template you want to use. ... domain to request certificates from the CA> ...
(microsoft.public.windows.server.security)
Re: Certificate Renewal minimum requirements
... > permissions are granted user always must have enroll permissions too. ... > able to enroll smart card user certificates by themselves. ... The solution is to use two certificate templates. ...
(microsoft.public.windows.server.security)