Avatar of wlasner
wlasnerFlag for United States of America

asked on 

How to use active directory GPO to install a certificate (.cer)

We need to ensure that all users get an SSL certificate installed in all their web browsers.
I created GPO but it isn't working.
Any help would be greatly appreciated.
Web BrowsersSSL / HTTPSActive Directory

Avatar of undefined
Last Comment
wlasner
ASKER CERTIFIED SOLUTION
Avatar of Will Szymkowski
Will Szymkowski
Flag of Canada image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of wlasner
wlasner
Flag of United States of America image

ASKER

So, I followed the instructions and did a gpupdate / force on the DC and on the users computer. No certificate show up. Should they actually be installed on the individual computers in the web browsers?
Computer policies will sometimes require a reboot in order for the policies to be applied completely.

Will.
Avatar of wlasner
wlasner
Flag of United States of America image

ASKER

tried that as well, still not showing up.
Avatar of Adam Brown
Adam Brown
Flag of United States of America image

Where did you link the policy? It needs to be linked to an OU that contains the computer objects rather than an OU that holds users.
Avatar of wlasner
wlasner
Flag of United States of America image

ASKER

So the only option is the top level domain as the link, the ou's for example, "Computers" is not an option. can you suggest how to correct this.
SOLUTION
Avatar of Adam Brown
Adam Brown
Flag of United States of America image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Avatar of wlasner
wlasner
Flag of United States of America image

ASKER

Ok, so it is linked to the domain. but is possible, how do I link the gpo to the OU if the only choice in the drop down is the domain?
Avatar of wlasner
wlasner
Flag of United States of America image

ASKER

One more thing, is the certificate actually installed in the browsers or do they only recognize then from where they are stored on the domain controller? Does the certificate need to be installed on the local domain controller as well (in the trusted root authority)?
Avatar of wlasner
wlasner
Flag of United States of America image

ASKER

Apparently the GPO is working, thank you... It seems to only work for IE. Isthere any way for it to also populate Firefox?
Active Directory
Active Directory

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo