|
Posted by Brian Komar [MVP] on August 21, 2006, 6:43 pm
Please log in for more thread options
mtw@vne.net says...
>
> Brian wrote:
> > Run certutil -dcinfo for each domain. This will report back to you
> > - What DCs have certs
> > - What certs each DC has
> > - Whether the certs are valid
> > Brian
>
> Brian,
>
> I've run certutil. In domain B I see an enterprise root certificate
> for each DC issued by the CA in domain A. I don't see any output that
> says "invalid" so I assume that the cert is vaild. Does this mean I'm
> in the clear?
>
> Thanks for your help,
>
> -mtw
>
>
??
Not sure what you mean. You should see either a domain controller or a
domain controller authentication certificate. An enterprise root
certificate would mean that you have made every single DC an enterprise
root CA which does not make sense.
Maybe post a sample, changing the names to protect the innocent.
Brian
| 
XML Sitemap