<div>
You can prevent SSL certifcates from being applied.<br />
See <a href="http://support.microsoft.com/kb/187498" rel="ugc">http://support.microsoft.com/kb/187498</a>
</div>


You can prevent SSL certifcates from being applied.
See http://support.microsoft.com/kb/187498 [http://support.microsoft.com/kb/187498]

<div>
<div class="content wysiwyg-content">
Hi<br />
<br />
What is the best way to prevent the default SSL cert's (for AD replication) being applied to one particular DC in my environment.<br />
<br />
I need to install a publicly signed SSL certificate on the DC for authentication purposes (Thawte) and I need to ensure that the domain controller certificate issued to Domain Controllers for replication is not reinstalled through autoenrollment when I delete it and reboot the DC?<br />
<br />
I only want to prevent this on one DC. &nbsp;<br />
<br />
I have tried various options including installing the Thawte cert, assigning it the server authentication role, assigning the default cert no role (have deleted as well), but as soon as the DC is rebooted, teh default cert takes over again.<br />
<br />
Thanks
</div>
</div>


Hi

What is the best way to prevent the default SSL cert's (for AD replication) being applied to one particular DC in my environment.

I need to install a publicly signed SSL certificate on the DC for authentication purposes (Thawte) and I need to ensure that the domain controller certificate issued to Domain Controllers for replication is not reinstalled through autoenrollment when I delete it and reboot the DC?

I only want to prevent this on one DC.  

I have tried various options including installing the Thawte cert, assigning it the server authentication role, assigning the default cert no role (have deleted as well), but as soon as the DC is rebooted, teh default cert takes over again.

Thanks

Windows 2003 AD - SSL Certificate Autoenrollment

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.