Standalone CA setup in Windows Server 2003 Std

I am now setting up standalone Certificate Authority (Root & Subordinate CA)
using Windows Server 2003 R2 Standard Edition.

Under the default setting, the "Key Usage" for both CA are "Digital
Signature, Certificate Signing, Off-line CRL Signing, CRL Signing (86)".

How can I change the key usage to "Digital Signature, Non-Repudiation,
Certificate Signing, Off-line CRL Signing, CRL Signing (c6)"?

Also, in the "Authority Key Identifier" field, I would like to include both
"Certificate Issuer" & "Certificate Serialnumber" into this field. I tried
the following command already but it didn't work.

certutil -setreg policy\EditFlags +EDITF_ENABLEAKIISSUERNAME
certutil -setreg policy\EditFlags +EDITF_ENABLEAKIISSUERSERIAL

Does anyone know how to solve this?