troubleshooting Question

Windows 7 Enrollment Agent

Avatar of lkpdtechdiv
lkpdtechdiv asked on
SecurityActive DirectoryWindows Server 2008
2 Comments1 Solution315 ViewsLast Modified:
I've got a Server 2008 R2 Enterprise Certificate server.  I'm trying to setup my workstation to be an enrollment agent so I can enroll on behalf of other users from the Certificate Manager snap-in.

Here's what I've done so far.

My user account is a Domain Admin, and I've verified that Domain Admins have Read/Enroll permissions for the Enrollment Agent template and the template that I want to enroll on behalf of.

From my workstation, I've requested and received an Enrollment Agent certificate, and it currently resides in my Local User -> Personal -> Certificate store.

When I try and "Enroll on Behalf of," I am unable to see that Enrollment Agent certificate (see attached screenshot).

I've tried placing the Enrollment Agent Certificate in almost every local certificate store, and I still can't select it when enrolling on behalf of another user.

I logged in as the Domain Administrator account on the CA server, requested an Enrollment Agent Certificate, and am able to enroll on behalf of other users just fine, but only when logged into the CA server as the Domain Admin.

I haven't tested logging in as myself on the CA server, or logging on to my workstation as Domain Admin to narrow down if it is the Account or the Computer that is enabling me to EOBO when logged in as Domain Admin on the CA server.

Any advice is appreciated.


Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 2 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 2 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros