I have Windows Server 2102 R2 and our AD team created a certificate template and assigned the permissions of enroll and read to a group my server is included it. However my machine is not listing the template as an option.

When I run certutil -Template It shows the permissions on the template properly, my machine and group are listed with enroll and read.

However, when I run certutil -ADTemplate the template shows as access denied. I am running this command from the machine with the assigned permissions.

Anybody have any ideas on what could be stopping my machine from using the template or other commands I can try to get a specific error?

To enroll the certificate I opened the MMC and added the certificate plugin. I then chose computer(local). I went to all tasks and request new certificate. In the wizard I chose active directory enrollment policy and the template was not one of the options so I checked show all and it shows the template I was trying for then however showing not available.

  • Can you provide steps you are using to enroll certificate? – Crypt32 Oct 15 '17 at 20:23
  • @Crypt32 updated the question to reflect enrollment process. – Xaxum Oct 16 '17 at 21:36

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.