|
Posted by =?Utf-8?B?RWxp?= on May 16, 2008, 2:09 am
If you were Registered and logged in, you could reply and use other advanced thread options
Permissions were checked-everything is in order, plus I’m using a default
“administrator” account which is part of all admin groups.
I visited the link that you provided, edited the registry but no changes.
As fas as replication it’s been more than a day.
"Miles Li [MSFT]" wrote:
>
> Hello,
>
> I am sorry that I have made a lapse in my previous reply.
>
> From my understanding, you have enabled the signing certificate template
> (you can view the enabled template in the CA MMC Certificate Template),
> However, when you want to enroll a certificate via web enrollment you can't
> find that specific template in the list. Please feel free to correct me if
> there is any misunderstandings.
>
> Please check the security on that template according to the following step:
>
> 1. Run "certtmpl.msc" in the commend prompt to open template manager.
>
> 2. Right click the signing certificate template--->properties--->Security.
> Check whether the user account that perform the web enrollment request on
> the member server has both READ and ENROLL permission.
>
> Note: By default, Domain admins and Enterprise admins groups have the both
> READ and ENROLL permission. This means if you submit the request by a
> non-admin user account (standard user account) the template will not shown
> in the list for the user has no ENROLL permission. (by default, the
> Authenticated Users have the READ permission that is inherited from the
> Computer Template)
>
> Meanwhile, please also note that you may experience latency before the
> template list gets updated.
>
> 281260 A Certificate Request That Uses a New Template Is
> Unsuccessful
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;281260
>
> Hope it helps.
>
>
> Sincerely,
> Miles Li
>
> Microsoft Online Partner Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
|