Certificate Services Web Enrollment requires admin access

[Steve March]

I have a Windows 2003 Enterprise root Certificate Authority set up. When I
go to the http://<CAname>/certsrv web page it immediately prompt me for a
username and password. If I give it a domain admin user/pass it lets me in
and I can then request a user certificate. It fails on any other non-domain
admin account. How can I fix it so any domain user can request a user cert?

Steve March

 

[Steven L Umbach]

What fails - the certificate request or access to Web Enrollment? If access to the
Web Enrollment itself fails, make sure users have read/list/execute permissions and
everyone has list permissions to the virtual website folder which by default would be
\windows\system32\certsrv. If they can not receive a certificate, make sure that the
user has proper group membership permissions to the certificate template in AD Sites
and Services/services/public key services/certificate templates where you need to
select view and select show services node first. Users need read and enroll
permissions. --- Steve

http://www.microsoft.com/windows2000/en/server/help/sag_CS_CertTemps.htm