Click here to get back home

Enterprise CA option not available when installing cert. services
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Enterprise CA option not available when installing cert. services Japan 09-21-2007
Posted by Japan on September 21, 2007, 2:18 pm
Please log in for more thread options
 I have done everything as stated on all documentation I could get my hands
on...

I have a stand-alone offline Root CA. I have an AD domain. I have a Windows
Server 2003 R2 Enterprise Edition joined to the domain. CRL and CA
certificate are published in the AD and are in the certificate store of the
soon to be enterprise CA.

I log on as an enterprise admin with local admin/domain admin rights.

Still, I don't get the option to install an enterprise CA, only stand-alone
ones.

Any ideas?

Posted by CanSpam on September 21, 2007, 3:15 pm
Please log in for more thread options
 AD domain functional level?


Japan felt like saying:

> I have done everything as stated on all documentation I could get my hands
> on...
>
> I have a stand-alone offline Root CA. I have an AD domain. I have a Windows
> Server 2003 R2 Enterprise Edition joined to the domain. CRL and CA
> certificate are published in the AD and are in the certificate store of the
> soon to be enterprise CA.
>
> I log on as an enterprise admin with local admin/domain admin rights.
>
> Still, I don't get the option to install an enterprise CA, only stand-alone
> ones.
>
> Any ideas?


Posted by Japan on September 21, 2007, 3:30 pm
Please log in for more thread options
Windows Server 2003...

"CanSpam" wrote:

> AD domain functional level?
>
>
> Japan felt like saying:
>
> > I have done everything as stated on all documentation I could get my hands
> > on...
> >
> > I have a stand-alone offline Root CA. I have an AD domain. I have a Windows
> > Server 2003 R2 Enterprise Edition joined to the domain. CRL and CA
> > certificate are published in the AD and are in the certificate store of the
> > soon to be enterprise CA.
> >
> > I log on as an enterprise admin with local admin/domain admin rights.
> >
> > Still, I don't get the option to install an enterprise CA, only stand-alone
> > ones.
> >
> > Any ideas?
>
>

Posted by Japan on September 21, 2007, 3:40 pm
Please log in for more thread options
Windows Server 2003

"CanSpam" wrote:

> AD domain functional level?
>
>
> Japan felt like saying:
>
> > I have done everything as stated on all documentation I could get my hands
> > on...
> >
> > I have a stand-alone offline Root CA. I have an AD domain. I have a Windows
> > Server 2003 R2 Enterprise Edition joined to the domain. CRL and CA
> > certificate are published in the AD and are in the certificate store of the
> > soon to be enterprise CA.
> >
> > I log on as an enterprise admin with local admin/domain admin rights.
> >
> > Still, I don't get the option to install an enterprise CA, only stand-alone
> > ones.
> >
> > Any ideas?
>
>

Posted by Brian Komar on September 22, 2007, 9:21 am
Please log in for more thread options
The key to this is the membership in the local Administrators group of the
enterprise Admin.
Double-check that you have explicitly added the Enteprise Admins group to
the membership of hte local Administrators group
Also, validate that your account is definitely in the membership of the
Enteprise Admins group

Brian

>I have done everything as stated on all documentation I could get my hands
> on...
>
> I have a stand-alone offline Root CA. I have an AD domain. I have a
> Windows
> Server 2003 R2 Enterprise Edition joined to the domain. CRL and CA
> certificate are published in the AD and are in the certificate store of
> the
> soon to be enterprise CA.
>
> I log on as an enterprise admin with local admin/domain admin rights.
>
> Still, I don't get the option to install an enterprise CA, only
> stand-alone
> ones.
>
> Any ideas?


Similar ThreadsPosted
'Replace cert' option grayed out? HELP! February 15, 2007, 2:18 pm
Installing Enterprise Root CA March 3, 2007, 10:00 am
Are there any GROUPs created automatically by installing Cert Server in Win2003? November 14, 2006, 11:34 am
Requesting Code signing cert from cert services November 4, 2005, 12:11 pm
Auto cert enrollment without an Enterprise Server June 19, 2006, 2:45 pm
MS Cert Services and PGP interoperability December 20, 2005, 11:07 pm
Where to run the Certificate Services to be an Enterprise CA July 5, 2007, 2:24 pm
Where to run the Certificate Services to be an Enterprise CA July 5, 2007, 2:43 pm
2K3 Cert Svcs gives invalid policy error on OpenSSL gen'd cert req June 4, 2007, 1:56 pm
Sharing and security option is gone. November 29, 2005, 5:46 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap