Certificate Server question

I've inherited a network with 2 Windows 2000 AD controllers, I'm prepping
everything to upgrade to AD2008. On the primary AD, I see that Certificate
Server is installed but I'm not sure it is being used or is necessary. When
I open the Certification Authority program, under Issued Certficates I see
about 25 entries. The most current one is from earlier this month but then
the next is December of last year. We have roughly 100 employees here and
there is only a small percentage showed here. When I look at the latest
certificate, it states that the certificate is intended to "Allows data on
disk to be encrypted". Where would this setting or certificate have come
from, what rules make it applicable and how can I tell if we REALLY need any
of this, which I don't think we do. Does any of this tie back into AD
settings? Can anyone give me more insight into this? Thanks

Bill

Hello Bill,

Maybe this can help you, if you think about removing it complete:
http://support.microsoft.com/kb/889250

http://support.microsoft.com/kb/555151

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I've inherited a network with 2 Windows 2000 AD controllers, I'm
> prepping everything to upgrade to AD2008. On the primary AD, I see
> that Certificate Server is installed but I'm not sure it is being used
> or is necessary. When I open the Certification Authority program,
> under Issued Certficates I see about 25 entries. The most current one
> is from earlier this month but then the next is December of last year.
> We have roughly 100 employees here and there is only a small
> percentage showed here. When I look at the latest certificate, it
> states that the certificate is intended to "Allows data on disk to be
> encrypted". Where would this setting or certificate have come from,
> what rules make it applicable and how can I tell if we REALLY need any
> of this, which I don't think we do. Does any of this tie back into AD
> settings? Can anyone give me more insight into this? Thanks
>
> Bill
>