We help IT Professionals succeed at work.

Does a CA web enrollment proxy need to be a DC?

Medium Priority
624 Views
Last Modified: 2008-05-30
If a windows server 2003 certificate authority server is a domain controller for contoso domain, does a windows server 2003 web enrollment proxy need to be a domain controller for contoso domain, ar can it just be a member server of contoso domain?
Comment
Watch Question

Consultant/Trainer
Commented:
Hi beplas,

No, but member server's computer account has to be trusted for delegation:

More info:
"Configuring and Troubleshooting Windows 2000 and Windows Server 2003 Certificate Services Web Enrollment"
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx#ESEAE

HTH

Toni

Author

Commented:
Thanks Toni, That answered my question perfectly.

I dont suppose you have any thoughts on this problem do you?
http://www.experts-exchange.com/Software/Server_Software/Web_Servers/Microsoft_IIS/Q_23107247.html