Welcome to ServerForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Problem with WIndows 2003 Certificate Services: Computers ..

 
   Windows Server (Home) -> Windows Server Security RSS
Next:  Can Someone Explain LocalService and NetworkServi..  
Author Message
Trond Hindenes

External


Since: Sep 23, 2003
Posts: 3



(Msg. 1) Posted: Fri Nov 07, 2003 2:29 am
Post subject: Problem with WIndows 2003 Certificate Services: Computers install certificates from root domain instead of child domain
Archived from groups: microsoft>public>windows>server>security (more info?)

hello,
We have an Active Directory-based domain structure, domain.com. root
domain has no users, only a few servers. Enterprise root CA is
installed here. I have a child domain for my country (no.domain.com),
which has a Subordinate Enterprise CA installed. THrough GPOs I have
enabled auto-enrollment of Certificates for the Computer accounts in
my domain. However, some of my computers enroll against the root
domain CA instead of my CA. I have looked at the Security tab but that
does only seem to control user enrollments, not computer enrollments.

Doeas anybody know how to "lock" my computers only to use my local CA
for enrolling?

best regards,
Trond Hindenes
Consultant
Norway

 >> Stay informed about: Problem with WIndows 2003 Certificate Services: Computers .. 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
How to prevent users from logging on locally to their comp.. - Hello, We would like to force users to logon into domain so all the scripts and patches could be applied. The situation is this: there are no local accounts on workstations, users have only a domain account. It is an NT4 domain, on workstations we have....

Terminal Services on Win2003 - How do you configure a Windows 2003 Web server to allow you to connect (via a trusted machine) for managing the boxr? I can't seem to find this information anywhere in the Help.

Certificate Services CRL Publication Interval - In the Windows Server 2003 Resource Kit, it says that one can publish a CRL every two days, with a CRL lifetime of one week, to 'protect against interruptions in communications'. This is very interesting, but I'm not sure how to achieve it. Is there a..

Unable to request Certificates through Certificate Service.. - Before I explain my problem, my setup is as follows... Server1: Windows Server 2003 Domain Controller, DNS Server2: Windows Server 2003 running Certificate Services and IIS (Member of the domain) Computer1: Windows XP Pro (Not a member of the domain) I....

A problem - I have a machine, that used to be connected to a LAN. The LAN was secure - only a few machines, no internet. Now the machine was moved and has been set with a permanent internet connection. When looking at the IIS log files I have noticed, that every day...
   Windows Server (Home) -> Windows Server Security All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]