Re: Certificate Services Web Enrollment requires admin access

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 07/01/04


Date: Thu, 01 Jul 2004 01:37:43 GMT

What fails - the certificate request or access to Web Enrollment? If access to the
Web Enrollment itself fails, make sure users have read/list/execute permissions and
everyone has list permissions to the virtual website folder which by default would be
\windows\system32\certsrv. If they can not receive a certificate, make sure that the
user has proper group membership permissions to the certificate template in AD Sites
and Services/services/public key services/certificate templates where you need to
select view and select show services node first. Users need read and enroll
permissions. --- Steve

http://www.microsoft.com/windows2000/en/server/help/sag_CS_CertTemps.htm

"Steve March" <steve@nospamplease.no> wrote in message
news:%23lSqagtXEHA.3552@TK2MSFTNGP12.phx.gbl...
> I have a Windows 2003 Enterprise root Certificate Authority set up. When I
> go to the http://>/certsrv web page it immediately prompt me for a
> username and password. If I give it a domain admin user/pass it lets me in
> and I can then request a user certificate. It fails on any other non-domain
> admin account. How can I fix it so any domain user can request a user cert?
>
> Steve March
>
>



Relevant Pages

  • Re: Computer and User Certificates Issues
    ... Enrollment of User Certificates using the custom v2 User Certificate Template ... I can NOT request the custom v2 Computer Cert nor the included v1 no ... Concerning permissions, these are the exact permissions I am using now: ...
    (microsoft.public.security)
  • Re: Web Certificate Enrollment security problem
    ... CERTSVC_DCOM_ACCESS security group of the server with the CA (have added ... The only thing that doesn't work is Web enrollment. ... access auditing and logging "issue and manage certificate requests" on the ... Have seen that there is a component "Certsrv Request" when launching ...
    (microsoft.public.security)
  • Re: Certificate Services Web Enrollment requires admin access
    ... What fails - the certificate request or access to Web Enrollment? ... everyone has list permissions to the virtual website folder which by default would be ...
    (microsoft.public.win2000.security)
  • Re: SSL and Server Windows 2003
    ... on windows 2003. ... Where do I set the permissions to request a cert thru web ... Ran the certificate wizard in iis to get the cert and it ...
    (microsoft.public.inetserver.iis.security)
  • Re: Offline creation of machine certificates for VPN access
    ... You could let your remote users request via Web Enrollment. ... connect via pptp and then request a certificate via Web Enrollment ...
    (microsoft.public.windows.server.security)