asked on

Auto enroll computer certifiacte

Hi all,

2012 domain windows 8.1 Ent.

Im trying to get my laptops to auto-enroll the computer certificate on my domain. I can do the process manually, but after adding the GPO to do this automatically the GPO is applying but failing to enroll.

Does a domain user have permission to do this?

McKnife

I have some problem understanding. You would like those computers to automatically request a certificate (which, what for?) What in particular did you configure in that GPO? How did you verify?

Matt

ASKER

https://technet.microsoft.com/en-us/library/cc732311%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

McKnife

I know what this is about, we do it ourselves. Please answer the rest of my questions.

Matt

ASKER

Verified by running RSOP on the machine.

Ive just noticed that If try and request a certificate manually it says "certificate types are not available". Am I missing something? I was able to do this on another machine.

McKnife

Please provide me with the steps to reproduce.
What is configured, what did you expect to happen, how are you doing the request?

Matt

ASKER

I have a certificate CA on my DC; with a computer certificate template. I want to enroll my laptops automatically. I managed to do one laptop manually. By opening the MMC certificates Snap-in and requesting the certificate manually. But im thinking ive missed a step somewhere? Do i need to make the template visible somehow?

McKnife

Could it be that you are logged on as local user and not as domain user? In that case, you wouldn't be able to request certificates from your domain CA (at least not via GUI, I have seen that myself).

ASKER CERTIFIED SOLUTION

David Johnson, CD

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial