Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a windows 2003 domain certificate authority internally that we use for SSL certificates. Domain admins are able to just use the IIS Certificate Request Wizard to install a certificate (choosing "Send the request immediately to an online certification authority" in the wizard).

When someone who is not a domain admin tries to do it they can complete the wizard and even ends up with a message saying it has installed the cert on the server. However, the cert is not installed.

Is there a specific permission that can be setup to allow a domain user who is not a domain admin to perform this action?

share|improve this question
up vote 0 down vote accepted is what I was looking for.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.