List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] [OT] ADCS autoenrollment for Domain Controllers

Prev Next

You are not authorized to post a reply.

Author

Messages

BrianB

Posts:138

02/01/2012 5:11 PM
Does anyone know if a GPO needs to be created for auto enrollment of Kerberos Authentication templates for Domain controllers, or if the built-in auto enroll on DC's will pick up the template automatically? (Given that the proper permissions are correctly set) I have deployed ADCS on Windows 2008 R2 SP1 and am decommissioning our old 2003 R2 CA which, up until now has been responsible for offering Domain Controller templates to the DC's. All of our DC's currently have this type of certificate but I want them to use the new templates available on 2008 R2 ADCS. So, does the built-in auto enroll on a DC get this template for the DC if it is deployed on ADCS or do I have to build a GPO with auto enrollment policy settings? Some of the articles I have read have conflicting information in regards to this. Thank you, Brian Britt Directory Services Specialist Vanderbilt University Information Technology Services Office: (615) 322-4676 OCS: (615) 875-9858

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] [OT] ADCS autoenrollment for Domain Controllers

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads