Certficate templates security

Certficate templates security

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Certficate templates security Bige 04-11-2006
Posted by Bige on April 11, 2006, 11:56 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

I've a very strange problem...

I installed a Win2000 CA on my domain controller and now I want to
change the Enroll permission for some templates.

Unfortunately if I go under AD sites and services/public key.... I can
see the templates but when I click on the properties the tab with
Security settings is missing.

What should I do?

I've already recreated the templates registering again certcli.dll but
the problem is still there...sigh!

Thank you,
Ivan Pololi
Italy


Posted by Paul Adare on April 11, 2006, 12:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
says...

> I've a very strange problem...
>
> I installed a Win2000 CA on my domain controller and now I want to
> change the Enroll permission for some templates.
>
> Unfortunately if I go under AD sites and services/public key.... I can
> see the templates but when I click on the properties the tab with
> Security settings is missing.
>
> What should I do?
>
> I've already recreated the templates registering again certcli.dll but
> the problem is still there...sigh!
>

You're using the wrong tool. Run certtmpl.msc and set the permissions
with that tool.

--
Paul Adare - MVP Virtual Machines
It all began with Adam. He was the first man to tell a joke--or a lie.
How lucky Adam was. He knew when he said a good thing, nobody had said
it before. Adam was not alone in the Garden of Eden, however, and does
not deserve all the credit; much is due to Eve, the first woman, and
Satan, the first consultant." - Mark Twain

Posted by Bige on April 12, 2006, 3:07 am
If you were  Registered and logged in, you could reply and use other advanced thread options
That is the tool for Windows 2003 CA not 2000...

I guess the problem has something to do with Ad schema properties...any
help please?


Posted by Bige on April 12, 2006, 3:16 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Paul,
actually you were half right...

I had installed a Windows 2003 CA in my domain but now I removed
it...probably something changed in the domain and now the only way to
manage the templates is from the certtmpl.msc of the 2003
machine...very starnge but now it works!

Thanks for your hint!


Similar ThreadsPosted
Security templates October 10, 2005, 5:41 am
Microsoft Security templates April 14, 2006, 9:56 am
Updated security Templates. April 24, 2006, 9:42 am
Applying security templates June 12, 2007, 6:01 pm
Security Templates in Windows 2003 October 10, 2005, 6:26 pm
Server 2003 Security Templates December 11, 2005, 1:46 pm
Security Templates on Windows XP Professional SP1 and SP2 August 23, 2006, 12:18 pm
Certificate Templates March 7, 2007, 4:50 pm
backup templates September 14, 2008, 7:01 pm
how to backup Certificate templates November 1, 2005, 10:15 pm

The site map in XML format XML site map

Contact Us | Privacy Policy