Re: SCCM Client Certificate question..

The cleint will check the certs with the server so it should be ok.


"Seth" <seth@xxxxxxxxx> wrote in message news:%23gZ6izAlIHA.1204@xxxxxxxxxxxxxxxxxxxxxxx
but they will need to access the Certificate Server.

I will publish ca web enrollment site.. I dunno if it will be enough..


"Garth" <Spam@xxxxxxx> wrote in message news:8A8497B0-57F1-49A3-B885-AB15EEB5174E@xxxxxxxxxxxxxxxx
I don't think so, (I would have to RTFM to confirm that) but they will need to access the Certificate Server.


"Seth" <seth@xxxxxxxxx> wrote in message news:eFYicj9kIHA.3888@xxxxxxxxxxxxxxxxxxxxxxx
Looks like solution is coming..
Also don't i need to import the SCCM Server's Web server certificate to clients?

"Garth" <Spam@xxxxxxx> wrote in message news:E084B95A-B7AE-4CCB-853A-BFD697A602C2@xxxxxxxxxxxxxxxx
Take a look at "How to Export the Site Server Signing Certificate for Configuration Manager Client Installation"
http://technet.microsoft.com/en-ca/library/bb932126.aspx



"Seth" <seth@xxxxxxxxx> wrote in message news:OGtPUW1kIHA.1368@xxxxxxxxxxxxxxxxxxxxxxx
http://technet.microsoft.com/en-us/library/bb632431.aspx

Mixed Mode
Does not support Internet-based client management.

If you read my question and business requirements you will see that mixed mode is not for me.
I hope someone who knows the right solution answer my question.


"Matthew Hudson" <MatthewHudson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:766D1E7A-760A-45AF-A6F3-C766FC8E034C@xxxxxxxxxxxxxxxx
Because of this:
"The computers that are all over the country are not member of any domain.
They are just workgroup computers"

You must run the server in Mixed mode. Native mode is only for computers
joined to a domain.


--
-----------------------
http://sms-hints-tricks.blogspot.com/


"Seth" wrote:

Any ideas about this problem?
I have to solve this problem..



"Seth" <seth@xxxxxxxxx> wrote in message
news:%23naCCmSkIHA.1680@xxxxxxxxxxxxxxxxxxxxxxx
> The computers that are all over the country are not member of any > domain.
> They are just workgroup computers. They are connected to internet. > No Wlan
> or something else to connect to SCCM server's network.
> I am looking for to hear a good solution to monitor them with > SCCM.
>
>
>
> "Matthew Hudson" <MatthewHudson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote > in
> message news:17509E05-250F-40CA-98FD-2CE67D2E4A21@xxxxxxxxxxxxxxxx
>> Nice, it removed my messaged..ug....
>>
>>
>> The computers that are all over the country are in domains in >> which a
>> trust
>> exists between your domains? How are the all structured? I >> don't know
>> how
>> you can do that if no trust exists and if they are not a memeber >> of the
>> AD
>> then you might need to switch to Mixed mode.
>>
>>
>> -- >> -----------------------
>> http://sms-hints-tricks.blogspot.com/
>>
>>
>> "Matthew Hudson" wrote:
>>
>>>
>>> -- >>> -----------------------
>>> http://sms-hints-tricks.blogspot.com/
>>>
>>>
>>> "Seth" wrote:
>>>
>>> > Hi,
>>> > I am deploying SCCM in native mode.
>>> > I created all necessart certificate templates. I configured
>>> > autoenrollment
>>> > in group policy. Domain computers can receive certifcates
>>> > successfully.
>>> > But,
>>> > I have computers all over the country which are not member of >>> > my AD
>>> > domain
>>> > and which never come to my network. They are always on >>> > internet. I
>>> > have to
>>> > manage them with SCCM. So they need to have computer >>> > certificate.. How
>>> > can i
>>> > create certificates for them and how can i install these >>> > certificates
>>> > with
>>> > minumum administrative effort.
>>> >
>>> > I published my CA certsrv page, tried to get a certificate >>> > from a
>>> > client but
>>> > in the certificate templates i can see only Basic EFS and >>> > User.. Which
>>> > type
>>> > of certificate should i see and how?
>>> >
>>> > Thank you.
>>> >
>>> >
>>> >
>
>












.

Relevant Pages

  • Re: RPC over HTTP only works with remote computers attached to the domain
    ... > I have an interesting problem with RPC over HTTP. ... > for computers that have been joined to the domain. ... but did you change the Exchange server service ... > Enterprise Certificate Server, Windows SharePoint Services, Internet ...
    (microsoft.public.exchange2000.connectivity)
  • Re: SCCM Client Certificate question..
    ... Take a look at "How to Export the Site Server Signing Certificate for Configuration Manager Client Installation" ... If you read my question and business requirements you will see that mixed mode is not for me. ... "The computers that are all over the country are not member of any domain. ...
    (microsoft.public.sms.admin)
  • Re: Enabling a Certificate template
    ... domain would require both the laptops certificate and the users domain login ... For the certification service to work in this way requires Server ... > You can mitigate that by removing authenticated users from the add ... Permissions for autoenrollment can also be given to computers. ...
    (microsoft.public.security)
  • Re: SCCM Client Certificate question..
    ... "The computers that are all over the country are not member of any domain. ... You must run the server in Mixed mode. ... They are connected to internet. ... I created all necessart certificate templates. ...
    (microsoft.public.sms.admin)
  • Re: IAS with WorkGroup machines
    ... My IAS works all fine for domain computers with AD user accounts. ... received the CA's certificate, which was stored in the certificate stores ... To deploy PEAP-MS-CHAPv2 for wireless clients, you must issue server ...
    (microsoft.public.internet.radius)