Дмитрий Максимов (dmitry_maximov) wrote,
Дмитрий Максимов


Если у Вас при установке сервера сертификатов все вроде бы хорошо, но в журнале появляются ошибки CertificationAuthority 80 с текстом "Active Directory Certificate Services could not publish a Certificate..." то обратите внимание на статью Certification Authority configuration to publish certificates in Active Directory of trusted domain.


"In Windows 2000 domains and in Windows Server 2003 domains that have been upgraded from Windows 2000, the Cert Publishers group is a Domain Global group. You must manually add the Cert Publishers group to each child domain.

For Windows Server 2003 domains

You can enable the child domain users to obtain certificates and to have them published in upgraded Windows Server 2003 domains. To do this, change the group type to Domain Local, and include the CA server from the parent domain. This procedure creates the same configuration that is present in a freshly installed Windows Server 2003 domain. "

Ржака же.

P.S. Дальше в статье написано, как это сделать с помощью команды dsmod, потому что из интефейса этого сделать нельзя...
Tags: работа
  • Post a new comment


    default userpic

    Your reply will be screened

    Your IP address will be recorded 

    When you submit the form an invisible reCAPTCHA check will be performed.
    You must follow the Privacy Policy and Google Terms of use.