I provide training for the US Military. When Sailors, Marines and Soldiers deploy their email address changes to the command they deploy to. Their Digital Certificates no longer work, because the email name on their on their certificate is different than the email account they are now using. Microsoft has a fix for this: "How to turn off e-mail matching for certificates in Outlook" from the Microsoft Knowledge Base
http://support.microsoft.com/kb/276597 HOWEVER, this change is applied to the HKE_Current_User Key, so it only effects the user logged on. Now for the issues:
1. Our troops dont have administrator privileges on the local machines. We do have a Group/Unit IT guy who has an administrative account, however, since the change is made to HKEY_Current_User when the regular user logs back on with his/her account they obviously dont have the change so it doesn't work.
2. Our Troops are guests on the network so we cant tell our host commands to apply a GPO to make the registry changes.
Ive had a couple of commands try making the registry change under HKEY_Local_Machine, but theyve reported back that it doesnt work under that key. ????
Help!
Start Free Trial