I have a Windows 2003 Enterprise root Certificate Authority set up. When I
go to the http:///certsrv web page it immediately prompt me for a
username and password. If I give it a domain admin user/pass it lets me in
and I can then request a user certificate. It fails on any other non-domain
admin account. How can I fix it so any domain user can request a user cert?

Steve March

What fails - the certificate request or access to Web Enrollment? If access to the
Web Enrollment itself fails, make sure users have read/list/execute permissions and
everyone has list permissions to the virtual website folder which by default would be
\windows\system32\certsrv. If they can not receive a certificate, make sure that the
user has proper group membership permissions to the certificate template in AD Sites
and Services/services/public key services/certificate templates where you need to
select view and select show services node first. Users need read and enroll
permissions. --- Steve

http://www.microsoft.com/windows2000/en/server/help/sag_CS_CertTemps.htm

"Steve March" wrote in message
news:%23lSqagtXEHA.3552@TK2MSFTNGP12.phx.gbl...
> I have a Windows 2003 Enterprise root Certificate Authority set up. When I
> go to the http:///certsrv web page it immediately prompt me for a
> username and password. If I give it a domain admin user/pass it lets me in
> and I can then request a user certificate. It fails on any other non-domain
> admin account. How can I fix it so any domain user can request a user cert?
>
> Steve March
>
>