W2003 CA in W2000 domain

[Pawel Jawien]

We are trying to implement PKI infrastructure in Windows 2000 Domain. CA in
installed on Windows 2003 Enterprise server. Users (test) can enroll
certyficates, but we have problem with certificate template modyfication.
Every tabs on Certificate Template are inactive - is it right?


Regards
Pawel Jawien

 

[David Cross [MS]]

you will have to run adprep.exe /forestprep to update the schema - the v2
templates will then be enabled



Best Practices:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/maintain/operate/ws3pkibp.asp



--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

Is it automatic after upgrade to W2003 schema domain?
Should I do any additional steps to have V2 certificate templates? Schema
upgrade is enough?

Regards
Pawel Jawien

Yes, this is correct.
In a Win2000 domain you only have V1 certificate templates, and for them the
property pages are disabled.
If you upgrade your domain to Win2003 schema, you'll also get the V3s
templates, which can be modified.

Thanks,
Eddy Koller [MS]

--
This posting is provided "AS IS" with no warranties and confers no rights.
Use of any included samples is subject to the terms specified at
http://www.microsoft.com/info/copyright.htm"

We are trying to implement PKI infrastructure in Windows 2000 Domain.

CA
in

installed on Windows 2003 Enterprise server. Users (test) can enroll
certyficates, but we have problem with certificate template modyfication.
Every tabs on Certificate Template are inactive - is it right?


Regards
Pawel Jawien