Enterprise Root CA with 2000 & 2003

[Harrison Midkiff]

Hello:

My domain is Windows 2000 AD, but since Windows 2003
is out everything we have been deploying has been Windows 2003. Do you know
if there are any problems with deploying a Windows 2003 Enterprise Root CA
in a Windows 2000 domain. Also I am curious should I follow the 2000 CA
info or the 2003 CA info on configuring it?

Harrison Midkiff

 

[Bob Qin [MSFT]]

Hi Harrison,

Thanks for your posting here.

To set up a Windows Server 2003 CA, the Active Directory schema must be
upgraded to the Windows Server 2003 schema. You cannot install a Windows
Server 2003 CA into a Windows 2000based schema.

The schema is updated to the Windows Server 2003 schema by running ADPREP
/Forestprep at a Windows 2000 domain controller with the Windows Server
2003 CD-ROM in the CD-ROM drive.

I would like to recommend that you refer to the Windows Server 2003 help
files and the following two public whitepapers.

http://www.microsoft.com/windowsxp/pro/techinfo/planning/pkiwinxp/default.as
p

Best Practices:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/maintain/oper
ate/ws3pkibp.asp

Have a nice day!

Regards,
Bob Qin
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.