Re: Child domain laptops autoenrolling user certs but not computer certs
- From: "Brian Komar \(MVP\)" <brian.komar.nospam@xxxxxxxxxxxxxxxxx>
- Date: Fri, 23 May 2008 20:47:09 -0500
1. Did you enable autoenrollment GPO for computers. It is a different GPO setting than for users
2. What are the permissions on the computer certificate template. Did you give the child domain\Domain COmputers group Read, Enroll, and Autoenroll permissions.
Run rsop.msc on the computer to determine the effective GPO settings
Brian
"bdo" <bdo.39w1zd@xxxxxxxxxxxxx> wrote in message news:bdo.39w1zd@xxxxxxxxxxxxxxxx
Ok, shameless bump... Any ideas out there? I tested today on a laptop
with Vista and got the same results. The user cert autoenrolls
perfectly, but no computer cert, yet I can enroll it through the mmc.
So I'm starting to think it's a bug in my AD somewhere.
--
bdo
------------------------------------------------------------------------
bdo's Profile: http://forums.techarena.in/member.php?userid=50025
View this thread: http://forums.techarena.in/showthread.php?t=972722
http://forums.techarena.in
.
- Follow-Ups:
- References:
- Prev by Date: Re: Child domain laptops autoenrolling user certs but not computer certs
- Next by Date: Re: LDAP lookup based on a Security group?
- Previous by thread: Re: Child domain laptops autoenrolling user certs but not computer certs
- Next by thread: Re: IAS and RAS server certificate enrollment
- Index(es):
