I have a Windows 2003 Enterprise root Certificate Authority set up. When I
go to the http://<CAname>/certsrv web page it immediately prompt me for a
username and password. If I give it a domain admin user/pass it lets me in
and I can then request a user certificate. It fails on any other non-domain
admin account. How can I fix it so any domain user can request a user cert?

Steve March

What fails - the certificate request or access to Web Enrollment? If access to the
Web Enrollment itself fails, make sure users have read/list/execute permissions and
everyone has list permissions to the virtual website folder which by default would be
\windows\system32\certsrv. If they can not receive a certificate, make sure that the
user has proper group membership permissions to the certificate template in AD Sites
and Services/services/public key services/certificate templates where you need to
select view and select show services node first. Users need read and enroll
permissions. --- Steve

http://www.microsoft.com/windows2000..._CertTemps.htm

"Steve March" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> I have a Windows 2003 Enterprise root Certificate Authority set up. When I
> go to the http://<CAname>/certsrv web page it immediately prompt me for a
> username and password. If I give it a domain admin user/pass it lets me in
> and I can then request a user certificate. It fails on any other non-domain
> admin account. How can I fix it so any domain user can request a user cert?
>
> Steve March
>
>