AD CS: Restrict Auto Enrollment to Particular CA

-

hi there,

using gpo activate auto enrollment of certificates there way tell clients ca (out of many) they should contact? using ca or template based permissions control or limit auto enrollment not an option.

regards,

christian

no, there no way. smell have wrong conception if wish that.

my weblog: http://en-us.sysadmins.lv
powershell pki module: http://pspki.codeplex.com
check out new: powershell fciv tool.



Windows Server  >  Security



Comments

Post a Comment

Popular posts from this blog

server manager error: ADAM.events.xml could not be enumerated.

-
firewall off isnt it. rerun ldap wizard:?  why?  will screw exchange server running on machine?  ldap wizard asks questions don't understand. please dont send generic links to: http://social.technet.microsoft.com/wiki/contents/articles/13444.windows-server-2012-server-manager-troubleshooting-guide-part-ii-troubleshoot-manageability-status-errors-in-server-manager.aspx thanks, john hi john, >> ok. server manager app. these questions refer this. nothing else 2.  do need create app dir or not?  this server manager, shouldnt done? (why did break in first place?) how check if app dir exists server manager or not. 3.  if "lightweight" implementation of anything, sure hate see "heavyweight" version. the waring events can't enumerated. , cause not completing configuration of ad lds. ad lds not related server manager. used provide flexible support directory-enabled applications. if not implementing such application...
Read more

EventID 7036 after ID 10029

-
i seeing hundreds of 7036 errors, proceeded error 10029.  suspect of these 7036 start , stop's running resources of server , causing freeeze. greatful in in solving issue. the server run fine several days, event occurs on , on , after day freezes. log name:      system source:        microsoft-windows-distributedcom date:          10/22/2010 12:01:21 am event id:      10029 task category: none level:         information keywords:      classic user:          n/a computer:      data1.local description: dcom  started service swprv arguments "" in order run server: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} ================================================================= log name...
Read more

Windows Firewall - Group Policy and local settings

-
i working on cleaning our mish mash of windows firewall policies.  defined on server server basis.  if "define inbound port exceptions" under "domain profile" of network connections > windows firewall, undo settings have been established on servers themselves? ask same question way, group policy , local firewall settings co-exist, or group policy overwrite local settings have been setup? by default co-exist if disable " windows firewall: allow local program exceptions" setting allow group policy defined settings... check details of setting out @ http://gps.cloudapp.net/default.aspx?policyid=2720 hope helps... alan burchill (mvp) http://www.grouppolicy.biz @alanburchill Windows Server  >  Group Policy ...
Read more