Does SBS 2003 Premium include its own installation of Microsoft Certificate Services installed in enterprise mode (i.e. AD integrated)? If so, then checking that box will result in clients enrolling a new certificate automatically from Certificate Services.
However, if SBS 2003 just does some stuff under the covers to just generate its own CA cert, and then issue certs signed by this CA cert to users as part of some SBS 2003 auto-funkiness, then checking that box will do nothing. Cheers Ken From: Gavin Wilby [mailto:[email protected]] Sent: Tuesday, 17 March 2009 2:22 AM To: NT System Admin Issues Subject: Expired Encrypting File System cert Hi All, Just a quick question I hope, I dont know if anyone has come across this one in the past. The cert that has been assigned to the Encrypting File System in the default domain policy has expired. This means that all offline file syncs now fail. I have read up on recreating one, but having never done it before its all a little daunting, as I dont know the ramifications if it all goes wrong. In the GP, at the Public key Policies level, there is an Auto Enrollment settings field that allows a check box to be put into the "renew expired certificates,.." Can I just do this and it will renew the expired cert, or is life just not that easy? If you have any tips or guidelines that would be great. Its a SBS2003 premium server BTW. Gavin. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
