Certificate Handling

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I realised that Windows 2000 Server's Standalone CA Server, I can "set the
certificate request status to pending" option so that administrator have
total control towards any new certficiate requested by clients on the web.
But I am already running Windows 2000 Enterprise CA server, is there a trick
to enable this option. As you knew, by default, this option is greyed. Thanks
heaps.
 
Hi,

In Windows 2000 Enterprise CA you can use permissions and group membership
to prevent users from requesting any certificates. If you give users
permission to Enroll to specific template you expressed your trust in users
and additional pending status should not be necessary.

Among other groups you can use e.g. "Authenticated users group" or "Domain
Users group" etc...

I know this is not direct answer to your question. Still I hope this helps,

Mike
 
Thanks Miha, appreciate your advice. I am actually hoping I can modify the
registry settings to enable the option, simply because we produce to many
external (non-trusted) users. But more importantly, this way administrator
can have a better control.
 
Back
Top