Petri IT Knowledgebase Forums
 

Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Microsoft Networking Services > Active Directory
Reload this Page

when installing a root CA the Enterprise root CA is greyed out

Petri.co.il is happy to award auglan the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read

Notices

when installing a root CA the Enterprise root CA is greyed out

when installing a root CA the Enterprise root CA is greyed out

this thread has 18 replies and has been viewed 12067 times

Closed Thread
Page 2 of 2 1 2
 
Thread Tools Search this Thread Display Modes
  #11  
Old 4th August 2008, 12:40
AndyJG247's Avatar
AndyJG247 AndyJG247 is offline
Senior Member
Wrote the book
  
 Join Date: Mar 2008
  6 month star 12 month star
 Location: London
 Posts: 3,842
 Reputation: AndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the rough (349)
Default Re: when installing a root CA the Enterprise root CA is greyed out
If you open Sites and Services, show the Services Node and then open Public Key Services and Certification Authorities do you have anything there?
__________________
cheers
Andy

Please read this before you post:
http://support.microsoft.com/kb/555375
Quis custodiet ipsos custodes?
  #12  
Old 4th August 2008, 16:48
Aeropars Aeropars is offline
Casual
Casual
  
 Join Date: Aug 2008
  6 month star 12 month star
 Location: Leicester, UK
 Posts: 41
 Reputation: Aeropars is on a distinguished road (10)
Default Re: when installing a root CA the Enterprise root CA is greyed out
HI,

No theres nothing in there. I checked all the folders here and there are no items shown.

Cheers

Lee
  #13  
Old 4th August 2008, 17:03
Dumber's Avatar
Dumber Dumber is offline
Moderator
  
 Join Date: Dec 2003
  6 month star 12 month star
 Location: The Netherlands
 Posts: 8,068
 Reputation: Dumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to behold (820)
Default Re: when installing a root CA the Enterprise root CA is greyed out
are you an enterprise admin?
This is required to install an enterprise root CA.

Edit:
Here you can find a link of what you have to do:
http://technet2.microsoft.com/window....mspx?mfr=true
__________________
Marcel
Netherlands
http://www.phetios.com
http://blog.nessus.nl

MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
No matter how secure, there is always the human factor.
  #14  
Old 4th August 2008, 17:32
Aeropars Aeropars is offline
Casual
Casual
  
 Join Date: Aug 2008
  6 month star 12 month star
 Location: Leicester, UK
 Posts: 41
 Reputation: Aeropars is on a distinguished road (10)
Default Re: when installing a root CA the Enterprise root CA is greyed out
I'm not an enterprise admin but i beleive i have found the issue.

Our domain is a 2000 domain althogh we run some 2003 member servers. I beleive this to be the problem as a 2003 server requires AD to be a 2003 schema.

Could this be the case?

regardign the enterprise admin: I dont appear to be able to add myself to this group as when i log on to the root domain i cannot add an acount to the group from the child domain.
  #15  
Old 4th August 2008, 17:44
Aeropars Aeropars is offline
Casual
Casual
  
 Join Date: Aug 2008
  6 month star 12 month star
 Location: Leicester, UK
 Posts: 41
 Reputation: Aeropars is on a distinguished road (10)
Default Re: when installing a root CA the Enterprise root CA is greyed out
Actually, scrap that. It IS a 2003 domain running at Windows Server 2003

Forest functional level is Windows Server 2000
  #16  
Old 4th August 2008, 20:12
AndyJG247's Avatar
AndyJG247 AndyJG247 is offline
Senior Member
Wrote the book
  
 Join Date: Mar 2008
  6 month star 12 month star
 Location: London
 Posts: 3,842
 Reputation: AndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the rough (349)
Default Re: when installing a root CA the Enterprise root CA is greyed out
Can you not create an account in the root domain and add that into the Ent Admins then use that to create it?

or something like
http://www.petri.co.il/forums/showth...terprise+admin

http://www.petri.co.il/forums/showth...terprise+admin
__________________
cheers
Andy

Please read this before you post:
http://support.microsoft.com/kb/555375
Quis custodiet ipsos custodes?
  #17  
Old 4th August 2008, 23:31
AndyJG247's Avatar
AndyJG247 AndyJG247 is offline
Senior Member
Wrote the book
  
 Join Date: Mar 2008
  6 month star 12 month star
 Location: London
 Posts: 3,842
 Reputation: AndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the rough (349)
Default Re: when installing a root CA the Enterprise root CA is greyed out
Found this too?
http://support.microsoft.com/kb/938613/en-us
__________________
cheers
Andy

Please read this before you post:
http://support.microsoft.com/kb/555375
Quis custodiet ipsos custodes?
  #18  
Old 5th August 2008, 10:30
Dumber's Avatar
Dumber Dumber is offline
Moderator
  
 Join Date: Dec 2003
  6 month star 12 month star
 Location: The Netherlands
 Posts: 8,068
 Reputation: Dumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to behold (820)
Default Re: when installing a root CA the Enterprise root CA is greyed out
Quote:
Originally Posted by Aeropars View Post
I'm not an enterprise admin but i beleive i have found the issue.

regardign the enterprise admin: I dont appear to be able to add myself to this group as when i log on to the root domain i cannot add an acount to the group from the child domain.
Well you need an account which is an enterprise admin in the root domain.
Otherwise you can't install an Enterprise root CA.
__________________
Marcel
Netherlands
http://www.phetios.com
http://blog.nessus.nl

MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
No matter how secure, there is always the human factor.
  #19  
Old 6th August 2008, 03:22
guyt's Avatar
guyt guyt is offline
[MSFT]
Guru
  
 Join Date: Nov 2003
  6 month star 12 month star
 Location: Israel
 Posts: 1,766
  Send a message via MSN to guyt
 Reputation: guyt is a name known to allguyt is a name known to allguyt is a name known to allguyt is a name known to allguyt is a name known to allguyt is a name known to all (592)
Default Re: when installing a root CA the Enterprise root CA is greyed out
If I had to bet, I'd be putting my money on leftovers from previous Enterprise CA stuck in Config partition.

Can you please post the output of:
Code:
C:\>dsquery * "CN=Public Key Services,CN=Services,CN=Configuration,DC=Domain,DC=local" -filter "objectclass=*" -limit 0
Replace "DC=Domain,DC=local" with the actual DN of your domain.
__________________
Guy Teverovsky
http://blogs.technet.com/b/isrpfeplat/
"Smith & Wesson - the original point and click interface"
Closed Thread
Page 2 of 2 1 2

« Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
W2k Root CA + W2k3 Sub - Need to upgrade Root tehhobbitz Windows Server 2000 / 2003 0 3rd April 2008 21:36
Convert Enterprise Root CA to Standalone Root CA and create new Subordinate CAs g18c Active Directory 2 21st March 2008 11:21
Moving AD root to new server user7 Active Directory 1 30th November 2007 14:45
How to demote existing primary root domain to secondary root domain yulhendri Active Directory 2 22nd June 2006 14:26
Moving to a new root Enterprise Certificate Authority heyhogan Windows Server 2000 / 2003 0 3rd June 2004 19:13


All times are GMT +3. The time now is 03:57.

Contact Us - Petri.co.il forums - Archive - Top
Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri