[[Forwarded to microsoft.public.windows.server.security newsgroup via
crosspost]]
Orbital wrote:> 2008 PKI, with a 2003 level domain. 2003 and 2008 DC's in a
root and child
> domain structure.
>
> Can anyone suggest some things to look at as to why my 2003 and XP clients
> are not autoenrolling? I know it's a very generic question, but I'm happy
> with a generic look at X Y and Z answer! 2008 are working beautifully.
> I've
> enabled the GPO in root and child domains for autoenrollment. Is the
> 'CERTSVC_DCOM_ACCESS' group membership relevant here?
|