hello,
We have an Active Directory-based domain structure, domain.com. root
domain has no users, only a few servers. Enterprise root CA is
installed here. I have a child domain for my country (no.domain.com),
which has a Subordinate Enterprise CA installed. THrough GPOs I have
enabled auto-enrollment of Certificates for the Computer accounts in
my domain. However, some of my computers enroll against the root
domain CA instead of my CA. I have looked at the Security tab but that
does only seem to control user enrollments, not computer enrollments.
Doeas anybody know how to "lock" my computers only to use my local CA
for enrolling?
best regards,
Trond Hindenes
Consultant
Norway
>> Stay informed about: Problem with WIndows 2003 Certificate Services: Computers ..