Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have implemented credential roaming for user certificates on our domain. Everything is set up per Technet in Certification Authority and Group Policy. User certificates are roaming correctly, but only on Windows 7 workstations. For some reason, our XP workstations (all are SP3), are not picking up the user certs from AD. I've verified that KB907247 is in fact included as part of SP3.

Can anyone provide some help on this issue?

share|improve this question
this concept seems very interesting... check out some steps listed on this blog post, as it explains the steps that are taken by the system. Did you verify the DLLs listed in that article (dimsntfy.dll, dimsroam.dll ) are of the same version as listed in KB907247 (likely yes since you have SP3 clients)? – mbrownnyc Oct 4 '11 at 20:18
Can you list the mode your domain controllers are operating in, and what OS you are using? – Brennan Apr 5 '12 at 20:58
The domain controllers are 2008 R2 running in functional level 2003 (we had just upgraded our last two 2003 DCs last week and are planning on moving to functional level 2008 R2 in a few weeks). – newmanth Apr 5 '12 at 23:40

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.