Click here to get back home

AD CS
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
AD CS Davor Perat 03-19-2008
|--> Re: AD CS Jorge de Almeid...03-19-2008
---> Re: AD CS Paul Bergson [M...03-19-2008
---> Re: AD CS Brian Komar \(M...03-19-2008
`--> Re: AD CS Paul Bergson [M...03-19-2008
Posted by Davor Perat on March 19, 2008, 5:09 am
Please log in for more thread options
 I am trying to build new PKI based on Windows Server 2008 AD CS.

Is it possible to have AD CS on Windows Server 2008 servers in Windows
Server 2003 Active Directory domain? Or do I need to upgrade Active
Directory to 2008 first and then build PKI?

Regards,

Davor


Posted by Jorge de Almeida Pinto [MVP - on March 19, 2008, 7:00 am
Please log in for more thread options
 not sure, but I would assume you would need to at least extend the AD
schema with the W2K8 stuff so that the W2K8 CA is able to use
objects/attributes that are not available in w2k3

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
>I am trying to build new PKI based on Windows Server 2008 AD CS.
>
> Is it possible to have AD CS on Windows Server 2008 servers in Windows
> Server 2003 Active Directory domain? Or do I need to upgrade Active
> Directory to 2008 first and then build PKI?
>
> Regards,
>
> Davor


Posted by Paul Bergson [MVP-DS] on March 19, 2008, 8:43 am
Please log in for more thread options
Need to be at 2008.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

>I am trying to build new PKI based on Windows Server 2008 AD CS.
>
> Is it possible to have AD CS on Windows Server 2008 servers in Windows
> Server 2003 Active Directory domain? Or do I need to upgrade Active
> Directory to 2008 first and then build PKI?
>
> Regards,
>
> Davor



Posted by Brian Komar \(MVP\) on March 19, 2008, 8:53 am
Please log in for more thread options
This is incorrect.
You need to apply the Windows Server 2008 schema update to AD only.
You do not need to be running Win2k8 DCs
Brian

> Need to be at 2008.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>>I am trying to build new PKI based on Windows Server 2008 AD CS.
>>
>> Is it possible to have AD CS on Windows Server 2008 servers in Windows
>> Server 2003 Active Directory domain? Or do I need to upgrade Active
>> Directory to 2008 first and then build PKI?
>>
>> Regards,
>>
>> Davor
>
>


Posted by Paul Bergson [MVP-DS] on March 19, 2008, 9:59 am
Please log in for more thread options
Ok poor choice of words, yes I meant running the extended schema.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

> This is incorrect.
> You need to apply the Windows Server 2008 schema update to AD only.
> You do not need to be running Win2k8 DCs
> Brian
>
>> Need to be at 2008.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>>I am trying to build new PKI based on Windows Server 2008 AD CS.
>>>
>>> Is it possible to have AD CS on Windows Server 2008 servers in Windows
>>> Server 2003 Active Directory domain? Or do I need to upgrade Active
>>> Directory to 2008 first and then build PKI?
>>>
>>> Regards,
>>>
>>> Davor
>>
>>
>




Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap