1
vote
1answer
42 views

Unnecessary Certificate Authority in Domain

I have an organization with a file server that is a secondary domain controller(2003 R2), an Exchange server(2008 R2), and a primary domain controller(2008 R2). We also have what used to be the ...
1
vote
0answers
1k views

Certificate enrollment for Local system failed to enroll Event ID:13

I've just finished installing a second domain controller to gain redundancy in the network. (and to solve some issues) After installation and configuring all errors are gone but one that is: Event ...
2
votes
1answer
1k views

Slow starting Domain Controller after installing Enterprise Certificate Authority in Windows 2008 R2

Because I want to test SSL in the local domain I've installed Enterprise Certificate Authority with the use of this tutorial. The Install went successful and after install I rebooted the DC. While ...
1
vote
1answer
1k views

Can I remove the DC role from a W2k8 server being an Enterprise CA?

Is it possible to run a W2k8 Enterprise (AD-integrated) Certificate Authority on a server that it not a domain controller - mine currently is a DC and I do not remember whether this was a requirement? ...
2
votes
3answers
436 views

Run `certutil -DCInfo` on a different target domain

It seems that running certutil.exe -DCInfo Verify will check the certificates for all domain controllers in the domain of the logged-in user account. In our AD forest, we have a handful of domains. I ...
1
vote
2answers
4k views

Domain Controller promotion and certificate autoenrollment

I have this AD domain where a Windows Server 2003 SP2 Enterprise Root Certification Authority is operational, and certificate autoenrollment is enabled both for users and computers; all fine and good, ...