Solved

Window Vista and Windows 7 cannot access Windows 2003 x64 Certsrv

Posted on 2012-03-14
8
382 Views
Last Modified: 2014-02-21
Hi,

Re: Windows Vista ie8 and Windows 7 ie8 cannot access Web certsrv

Actually all patches win2003 srv should updated already included KB922706, but till now the Windows Vista and Windows 7 still cannot access to certsrv, please kindly let me know anything I need to update with many thanks.

Best Regards,
Timothy Chung
0
Comment
Question by:tswchung
  • 3
  • 3
8 Comments
 
LVL 9

Accepted Solution

by:
lojk earned 500 total points
ID: 37719547
I think I know the problem you are talking about - you are trying to access the /certsrv IIS directory from certain machines and it doesnt work/is not accessible/ the activex component doesn't install correctly.

I never managed to get it working from the browser in OSs after Winxp/2003 (i often need to issue a code-signing cert for development work) but a fairly simple workaround is to use the Certifcates Snap-in in MMC to view (and request by right cliking in the right hand side pane) certificates .

see this page for details on how to do this.

http://msdn.microsoft.com/en-us/library/ms788967.aspx

Hope that sorts it for you.
0
 

Author Comment

by:tswchung
ID: 37723877
Finally, I walk to the user's PC, start certmgr.msc and enroll the cert manually. It work, but I need temporary grant the user right to domain admin, otherwise it pop-up RPC unavailable.
0
 
LVL 9

Expert Comment

by:lojk
ID: 37723950
Assuming its not a firewall issue have you checked that the rpc services are not disabled,should be manual or automatic?
0
Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

 

Author Comment

by:tswchung
ID: 37723961
yes, it just worked on the user with Doamin Administrators right only.
I think need to spend time to check the Group Policy and allow the user to have rights access
RPC
0
 
LVL 9

Expert Comment

by:lojk
ID: 37724006
Create a domain group called 'machine administrators' and join that to the local administrators group on the pc. Then you can add people in and out of the domain group without having to grant local admin rights insividually to the machine.
0
 

Author Comment

by:tswchung
ID: 37724011
Well noted, thanks a lot
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
Know what services you can and cannot, should and should not combine on your server.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now