Re: AD Autoenrollment of Certificates
From: Shawn Rabourn [MSFT] (shawnrab_at_online.microsoft.com)
Date: 03/25/04
- Next message: Shawn Rabourn [MSFT]: "Re: AD Autoenrollment of Certificates"
- Previous message: Eric Voskuil: "Re: Assigning a Computer a Printer"
- In reply to: Franz Schenk: "AD Autoenrollment of Certificates"
- Next in thread: Shawn Rabourn [MSFT]: "Re: AD Autoenrollment of Certificates"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 25 Mar 2004 00:52:08 -0500
Windows 2003 replaced the Autoenrollment policy with an AutoEnroll ACE in
the template. To get all of the features of a Windows 2003 Enterprise CA,
you can run forestprep and domainprep without promoting a single DC to
Windows 2003.
--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.
"Franz Schenk" <franz.schenkNOSPAM@fititNO-_SPAM.ch> wrote in message
news:uGW8JINEEHA.3392@TK2MSFTNGP11.phx.gbl...
> We have a Enterprise CA on a Windows 2003 member server in a Windows 2000
> Forest and Domain. We had to discover that the object "Autoenrollment
> settings" in "Public Key Policies", Security Settings", "Windows Settings"
> in the computer configuration of the default domain GPO is missing. Thats
> even the same if we create a new GPO on the Windows 2003 member server
with
> the GPMC console.
>
> What do we have to do for automatically distribute and renew computer and
> user certificates from the Windows 2003 enterprise CA to our XP SP1
clients?
> Is there a possibility to do that with the Windows 2000 AD, do we have to
> upgrade just one domain contoller to Windows 2003, all domain controllers
in
> the domain, or even upgrade the forest to Windows 2003?
> Or can we just run forestprep and/or domainprep in our domain without
> upgrading to Windows 2003?
>
> Thanks in advance for any help!
> Franz
>
>
- Next message: Shawn Rabourn [MSFT]: "Re: AD Autoenrollment of Certificates"
- Previous message: Eric Voskuil: "Re: Assigning a Computer a Printer"
- In reply to: Franz Schenk: "AD Autoenrollment of Certificates"
- Next in thread: Shawn Rabourn [MSFT]: "Re: AD Autoenrollment of Certificates"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
