Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have a windows 2003 domain certificate authority internally that we use for SSL certificates. Domain admins are able to just use the IIS Certificate Request Wizard to install a certificate (choosing "Send the request immediately to an online certification authority" in the wizard).

When someone who is not a domain admin tries to do it they can complete the wizard and even ends up with a message saying it has installed the cert on the server. However, the cert is not installed.

Is there a specific permission that can be setup to allow a domain user who is not a domain admin to perform this action?

share|improve this question

1 Answer 1

up vote 0 down vote accepted

http://technet.microsoft.com/en-us/library/cc962096.aspx is what I was looking for.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.