Re: Wireless Radius Clients

In news:85715508-1D5C-432A-A269-ED41BB0DFFA8@xxxxxxxxxxxxx,
Steven <Steven@xxxxxxxxxxxxxxxxxxxxxxxxx> stated, which I commented on
below:
Ignore this. This issues with computer cert $ resolved.

Just need to autoenroll user accounts and I'm finished. As I said
earlier, I can duplicate the template but when I go to add it, it
does not appear in the window. Note the there is already a "user"
there. Maybe there can only be one of each type?? And if so wouldn't
that type just auto enroll if GPO user setting is set to auto
enroll???

That;s because the issuing CA MUST be Enterprise Edition. Standard Editions
will NOT work. That's why it doesn't show up as a template. The article you
gave me, although I don't see page numbers, but just searched on
'enterprise' and got this (it looks like it might be page 7 of 32):

"Additionally, if you want to take advantage of autoenrollment for computer
certificates, use Windows 2000 Server or Windows Server 2003 Certificate
Services and create an enterprise CA at the issuer CA level. If you want to
take advantage of autoenrollment for user certificates, use Windows Server
2003, Enterprise Edition, or Windows Server 2003, Datacenter Edition,
Certificate Services and create an enterprise CA at the issuer CA level."

Ace


.

Relevant Pages

  • Autoenrollment Error Logged on Second W2K3 SP1 Domain Controller
    ... certificates from an Enterprise Root CA, which is located in a single ... Windows Server 2003 domain. ... Source: AutoEnrollment ... The Certificate Authority is installed with the default configuration and ...
    (microsoft.public.windows.server.active_directory)
  • Re: client user certificates
    ... The best way to deploy certificates automatically to a user certificate ... Autoenrollment is available for clients ... When using Windows Server 2003 Enterprise edition you can customize your ... any purpose, from EFS, to Client Authentication, to custom purposes. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Difference between 2003 edition for PKI functionnality
    ... > The Enterprise edition of Windows Server 2003 allows for the use of ... Pretty much everything about the template is editable. ... > allow for customizing of the certificates the machines automatically ...
    (microsoft.public.windows.server.security)
  • Re: Auto-Enrollment of Certificates
    ... The adminpak is available on your Windows Server 2003 CD. ... how to install on various versions. ... you can use an enterprise CA to issue your certificates. ... This is a Active Directory configuration, ...
    (microsoft.public.platformsdk.security)
  • Re: client user certificates
    ... in certificates using Windows Server 2003 Enterprise Edition Enterprise CAs ... but it would be nice if there was a way to autoenroll the user. ... We have a Windows Server 2003 domain environment with a Enterprise ...
    (microsoft.public.windows.server.active_directory)