ADCS Installation (Part 13): How to enroll user certificates automatically?

-

hello everyone,
adcs installation offline root ca , online issuing ca servers working. have renewed web certificate on adcs default home page , re-configured htpps. can issue certificates via adcs default home page.

have applied gpo enroll computer certificates automatically via gpo. computer certificates enrolled automatically , evidences on online issuing ca server (certificates on ca console).

have created gpo set following policies:
user configuration/windows settings/security settings/public key policies/autoenrollment settings
         enroll certificates automatically enabled.
                 renew expired certificates, update pending certificates, , remove revoked certificates enablled
                 update certificates use certificate templates enabled

user configuration/administrative templates/certificate services client
         x.509 certificate , key roaming enabled default parameters 60, 2000, 65535

user certificates not enrolled automatically. user certificates have not been created on online issuing ca server.

have checked output of gpresult utility. output shows user certificate gpo has been applied part of user configuration.

why couldn't user certificate autoenrollment working?

thanks,

sjj123

check:
1) certificate template permission enables read, enroll, , autoenroll permission user or global/universal group containing user
2) certificate template published @ ca
3) have waited time between publication , attempt autoenroll (to allow replication)
4) user account exists in ou gpo applied user autoenrollment

brian


Windows Server  >  Security



Comments

Post a Comment

Popular posts from this blog

Group Policy Event ID 1058 Error Code 1326 (The user name or password is incorrect)

-
i seeing odd error on 1 of our domain controllers. have dealt event id 1058 errors whereby policy (or policies) not replicating, receiving error along error code 1326 on server, , apparently happening default domain policy: log name:      system source:        microsoft-windows-grouppolicy date:          8/10/2015 3:09:54 pm event id:      1058 task category: none level:         error keywords:      user:          s-1-5-21-1484152634-2550175353-3916092219-3287 computer:      <dc name>.<domainname> description: processing of group policy failed. windows attempted read file http://schemas.microsoft.com/win/2004/08/events/event ">   <system>     <provi...
Read more

Suspicious event log Event ID: 4905

-
hi thr, could please me understand causing such event logs generate ? as  i understand, vssvc.exe pertains volume shadow copy used backup purpose.  we have third party application used taking backup of servers. the event longs generated following messages: 1) attempt made unregister security event source. 2) attempt made register security event source. these events not regular generated on random days. standard fields: date:               2013/10/19 time:               02:32:19 importance:         critical rule name:          security event monitored machine:  <domain controller> log format:         windows log name:           security event id:           4905 in work hours:      yes dynamic fields: internal timestamp: 2013/10/19 ...
Read more

DCOM received error "2147746132" from...

-
hi everybody, i have dc (my windows essentials 2012 server) , windows 2012 server in network.  the windows server 2012 inside domain. on server, got "non stopping" error says in event logs : ===> dcom received error "2147746132" fromd computer xxxx(my dc computer) while server trying activation : {6df8cb71-153b-4c66-8fc4-e59301b8011b} it never stops, got 11000+ new events :s i found : http://support.microsoft.com/kb/971153/fr i'm not sure should ? does got idea ? matthieu. hi, please try solution mentioned in below link: http://www.eventid.net/display-eventid-10006-source-dcom-eventno-272-phase-1.htm regards, cicely Windows Server  >  Windows Server 2012 General ...
Read more