Certificate Authority x Active Directory

Hi everybody

I need your help...

I have a Domain controller (acme.com) and I have a Server with Certificate Authority without Active Directory. The Certificate Authority's machine is a member of acme.com Domain

I need to allow the Domain Administrator manage all the certificates. But when I open the certificate authority, the option "duplicate template" isn't avaliable...

What's the permissions to permit that my Domain Administrator have access to duplicate a certificate in Certificate Authority??

Thank you very much

David
Mon Mar 01 07:33:38 CST 2004

Enterprise Admin. Do you have Windows Server 2003 Enterprise Edition? v2
templates may not be used on Standard Server.

Cert templates -
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/deploy/confeat/ws03crtm.asp



--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

"Kleber Freitas" <anonymous@discussions.microsoft.com> wrote in message
news:328BAB65-DC75-48B1-AD2D-39BAE3B5CC46@microsoft.com...
> Hi everybody,
>
> I need your help....
>
> I have a Domain controller (acme.com) and I have a Server with Certificate
Authority without Active Directory. The Certificate Authority's machine is a
member of acme.com Domain.
>
> I need to allow the Domain Administrator manage all the certificates. But
when I open the certificate authority, the option "duplicate template" isn't
avaliable....
>
> What's the permissions to permit that my Domain Administrator have access
to duplicate a certificate in Certificate Authority???
>
> Thank you very much

Brian
Mon Mar 01 07:41:41 CST 2004

In article <328BAB65-DC75-48B1-AD2D-39BAE3B5CC46@microsoft.com>,
anonymous@discussions.microsoft.com says...
> Hi everybody,
>
> I need your help....
>
> I have a Domain controller (acme.com) and I have a Server with Certificate Authority without Active Directory. The Certificate Authority's machine is a member of acme.com Domain.
>
> I need to allow the Domain Administrator manage all the certificates. But when I open the certificate authority, the option "duplicate template" isn't avaliable....
>
> What's the permissions to permit that my Domain Administrator have access to duplicate a certificate in Certificate Authority???
>
> Thank you very much
>
As David said in another reply, you must be a member of Enterprise
Admins. In addition, you do not duplicate certificates in the
Certification Authority console, you use the Certificate Templates
console (certtmpl.msc)

Brian

anonymous
Mon Mar 01 07:46:10 CST 2004

Yes...... I have Windows 2003 Enterprise Edition (certificate authority) and Windows 2000 Server SP4 (Domain Controller)....

anonymous
Mon Mar 01 08:21:09 CST 2004

One more question guys...

In article that David sent me, there's an instruction

"13
In the console tree, right-click CN=OID, and then click Properties

14
In the CN=OID Properties dialog box, on the Security tab, click Add. Add a global or universal group that contains the users you wish to delegate certificate creation and management permissions to, and then click OK.

But in my environment, I don't have CN=OID container.....

anonymous
Mon Mar 01 09:06:07 CST 2004

I'm using C.A 2003 Enterprise...

is there some problem when I use the C.A in a different machine of AD???