Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a certificate authority / server in our domain. If we install new machines and join them to the domain, they automatically receive the root certificate in their Trusted Root Certification Authorities store. However, our PC group often uses a Windows 7 image when deploying new machines, but machines created from this image don't seem to get this certificate when they join the domain.

What could be different to prevent these machines from receiving the certificate?

share|improve this question
up vote 0 down vote accepted

One of our PC Technicians discovered that it was the McAfee Virus Scan software that was blocking the certificate from downloading. The Virus Scan software is built into all of our images.

The only workaround we currently have is to disable the Virus Scan, join the domain, then re-enable the Virus Scan.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.