Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1128
  • Last Modified:

Windows 2003 Enterprise CA - Basic EFS Autoenrollment

Can one of you experts tell me or point me to a link that tells me why my Enterprise CA (running on 2k3 enterprise) autoenrolls BASIC EFS cert requests although that template show Not Allowed for Auto enrollment?  If this is by design, do I really need it and can I turn it off without affecting other templates I want to autoenroll?  It looks to me like the User template provides the same functionality.  I have searched the net for the last several hours and cannot find anything specific to this.

Thanks in advance.

Danny
0
dmccampbell
Asked:
dmccampbell
  • 3
  • 2
1 Solution
 
TheCleanerCommented:
From here: http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/certenrl.mspx

EFS always attempts to enroll for the Basic EFS template. The EFS driver generates an autoenrollment request that Autoenrollment tries to fulfill. For customers that want to ensure that a specific template is used for EFS (such as to include key archival), the new template should supercede the Basic EFS template. This will ensure that Autoenrollment will not attempt enrollment for Basic EFS any more.


Basically you have to create a new templte that supercedes the Basic template if you do not want it to attempt auto-enrollment.

Strange, but true.
0
 
dmccampbellAuthor Commented:
Tried what you suggested and per the link you provided and dup'd the Basic EFS Template making it to supercede the original Basic EFS.  However, users are still autoenrolling Basic EFS.  What did I miss?
0
 
TheCleanerCommented:
Did you create a brand new template or just copy and change the Basic EFS template?  I think it's saying to create it from scratch, but I'm not sure myself.

Are you sure it's trying to auto-enroll the original Basic, or is it now trying to auto-enroll the one you dup'd?
0
 
dmccampbellAuthor Commented:
That must have been it.  All seems to be working well now.  Thanks.
0
 
TheCleanerCommented:
Cool deal...
0

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now