Window Vista and Windows 7 cannot access Windows 2003 x64 Certsrv

Hi,

Re: Windows Vista ie8 and Windows 7 ie8 cannot access Web certsrv

Actually all patches win2003 srv should updated already included KB922706, but till now the Windows Vista and Windows 7 still cannot access to certsrv, please kindly let me know anything I need to update with many thanks.

Best Regards,
Timothy Chung
tswchungAsked:
Who is Participating?
 
lojkConnect With a Mentor .Net and Infrastructure ConsultantCommented:
I think I know the problem you are talking about - you are trying to access the /certsrv IIS directory from certain machines and it doesnt work/is not accessible/ the activex component doesn't install correctly.

I never managed to get it working from the browser in OSs after Winxp/2003 (i often need to issue a code-signing cert for development work) but a fairly simple workaround is to use the Certifcates Snap-in in MMC to view (and request by right cliking in the right hand side pane) certificates .

see this page for details on how to do this.

http://msdn.microsoft.com/en-us/library/ms788967.aspx

Hope that sorts it for you.
0
 
tswchungAuthor Commented:
Finally, I walk to the user's PC, start certmgr.msc and enroll the cert manually. It work, but I need temporary grant the user right to domain admin, otherwise it pop-up RPC unavailable.
0
 
lojk.Net and Infrastructure ConsultantCommented:
Assuming its not a firewall issue have you checked that the rpc services are not disabled,should be manual or automatic?
0
Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

 
tswchungAuthor Commented:
yes, it just worked on the user with Doamin Administrators right only.
I think need to spend time to check the Group Policy and allow the user to have rights access
RPC
0
 
lojk.Net and Infrastructure ConsultantCommented:
Create a domain group called 'machine administrators' and join that to the local administrators group on the pc. Then you can add people in and out of the domain group without having to grant local admin rights insividually to the machine.
0
 
tswchungAuthor Commented:
Well noted, thanks a lot
0
All Courses

From novice to tech pro — start learning today.