Re: Installing a Enterprise Root CA in a mixed mode environment
- From: Kurt1231 <Kurt1231@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 19 Dec 2006 06:53:02 -0800
aIrv, thanks again for the response.
The account I am using is both a member of the Enterprise Admins group and
the root Domain Admins group.
I have inherited this network, and it is possible at one time there was a
Enterprise Root CA. If so, how do I clear out the "metadata". Or how can I
be certain that no Enterprise Root CA was ever installed in the domain?
Thanks again.
"Irv" wrote:
What account are you using to do the install? It needs to be a member of the.
Enterprise Admins group for the forest and local admin on the server you are
installing onto.
If not that then you may need to do a domainprep. I'm thought you didn't
need to do this for an Enterprise CA but I may be wrong.
Finally, if any components of Certificate services are installed remove them
and reboot the server (last hurrah!)
Good Luck
Irv
"Kurt1231" wrote:
our Schema version is at 31.
Any other reason why I cannot install a Enterprise Root CA on any of my 2003
servers?
"Kurt1231" wrote:
Thank you both for the replies.
If I understand correctly. I need to extend the schema FIRST before
installing a Enterprise Root CA on a Windows 2003 server?
How do I find out what version of Schema I am currently running?
Thanks again.
"Irv" wrote:
To clear things up a bit you can -:
1) Install a Windows 2003 PKI on a W2000 AD
2) Domain and forest functional level is irrelevant
3) You need to extend the schema (version 13 to version 30 I think) to take
advantage of some of the new features of W2003 PKI e.g. version2 templates,
delta CRL's etc.
4) If you have Exchange 2000 installed you will also have to do some work
before the schema update to prevent attribute mangling
HTH
Irv
"twnich+activedirectory@xxxxxxxxx" wrote:
Correct me if I'm wrong, but don't you have to extend your AD Schema to
support Windows Server 2003 before you can introduce W2K3 Enterprise
CA's into your environment?
Have you tried this? Maybe someone else out there can tell me if I'm
right about this or not.
-Tim N.
Disclaimer: The advice in this posting is provided AS IS with no
guarantees or warranty. Use this information at your own risk.
Kurt1231 wrote:
Hello, we are running a mix of W2K and W2K3 servers. I am trying to install
a Enterprise Root CA on one of my W2K3 servers. When I do, I can only
install a Stand alone Root CA. If I go to one of my W2K servers, I CAN
install a Enterprise Root CA.
Is this normal behavior?
How can I install a Enterprise Root CA on a W2K3 server in a mixed mode
environment?
Anyone?
- Follow-Ups:
- References:
- Re: Installing a Enterprise Root CA in a mixed mode environment
- From: twnich+activedirectory@xxxxxxxxx
- Re: Installing a Enterprise Root CA in a mixed mode environment
- From: Irv
- Re: Installing a Enterprise Root CA in a mixed mode environment
- Prev by Date: Re: Reading a user's password
- Next by Date: ADAM – Customizing the Config.XML File
- Previous by thread: Re: Installing a Enterprise Root CA in a mixed mode environment
- Next by thread: Re: Installing a Enterprise Root CA in a mixed mode environment
- Index(es):
Relevant Pages
|
