Re: CA web enrollment premission error - Server 2003

From: Burtsev Dmitry (burtsev_at_removethispart.km.ru)
Date: 09/10/04 

Date: Fri, 10 Sep 2004 13:55:49 +0400

It is not problem in CA permissions.
In IIS snap-in right click on default web site - properties - Directory
security - you can see that only
Integrated Windows Authentication checkbox is selected. Read more about it
in Help.
If you check NTFS permissions on c:\windows\system32\certsrv you can see
users that have access to content.

You can resolve with two way:
1. Add to NTFS ACL on CA for appropriate user account
2. In your web browser select Tools - Internet options - Advanced - diselect
Enable Integrated Windows Authentication
Now when you connect to http://CA/certsrv , you must type user name and
password that have access. CA\administrator will be work perfectly. 

-- 
Dmitry Burtsev [burtsev@removethis.km.ru]
"Jeffery" <anonymous@discussions.microsoft.com> wrote in message
news:940101c496d9$9ffd1710$a501280a@phx.gbl...
> Hi
> I've installed a standalone CA on the Windows 2003 server,
> it is part of a domain but I installed it as a local
> administrator.
> When I try to request a certificate from another computer
> (also Windows 2003 server) using http://server/certsrv, I
> get "You are not authorized to view this page. You might
> not have permission to view this directory or page using
> the credentials you supplied. "
> I checked the security settings under the CA mmc and the
> premission is set to everyone (allow to request
> certificate)
> Any ideas what to do or where to look?
> Much appericiated
>

Relevant Pages

  • Re: Password required for Reports
    ... IIS permissions are Read which match our Central site which works. ... Authentication is Integrated Windows Authentication. ... I know everyone is thinking it's a rights issue but I've checked the ... Reapplied security rights - no luck ...
    (microsoft.public.sms.admin)
  • Re: Digital ID
    ... Include Certificate and that had a value of. ... the permissions are for "This Object Only." ... Did you make any changes on the Advanced Button of the Digital Sig security ... account>properties>security tab, any reference there to a certificate to ...
    (microsoft.public.windows.vista.mail)
  • RE: What server hardening are you doing these days?
    ... permissions on their data, and Microsoft encourages ISVs to minimize ... I've been able to discuss ACLs and other security issues in Windows with ... Control or DAC (which is what you're referring to by the "stupid ...
    (Focus-Microsoft)
  • Re: get rid of security center?
    ... I have come up with a solution that does not disable Security Center, ... By changing the Permissions of that key, ... settings from being changed again. ... the firewall alert settings in Security Center get ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Password Protect IExplore
    ... You can protect the files and folders you store on your computer to make ... To set, view, change, or remove special permissions for files and folders ... clear the Inherit from parent the permission entries that apply ... To configure security so that the subfolders and files will not ...
    (microsoft.public.internet.explorer.ieak)