Certificate Enrollment Policy

%3CLINGO-SUB%20id%3D%22lingo-sub-2750179%22%20slang%3D%22en-US%22%3ECertificate%20Enrollment%20Policy%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2750179%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20I%20have%20a%20question%20about%20Certificate%20Enrollment%20Policies.%20I%20am%20seeing%20two%20different%20policies%20on%20two%20different%20computers%20and%20not%20sure%20why.%20Both%20users%20are%20logged%20into%20the%20same%20domain%20but%20when%20I%20go%20to%20request%20a%20certificate%20from%20UserA%20using%20the%20certmgr.msc%20console%20I%20see%20%22Configured%20by%20your%20Administrator%22%20Active%20Directory%20Enrollment%20Policy%20ID%3A%20xxxxx-xxxx-xxxx%20etc..%20on%20one%20computer%20and%20am%20able%20to%20see%20certificate%20templates%20listed.%3CBR%20%2F%3E%3CBR%20%2F%3EWhen%20I%20log%20on%20as%20UserB%20on%20a%20different%20computer%20using%20certmgr.msc%20console%20I%20see%26nbsp%3B%22Configured%20by%20your%20Administrator%22%20Active%20Directory%20Enrollment%20Policy%20ID%3A%20yyyyyy-yyyyyy-yyyyy%20etc..%20and%20I%20don't%20see%20ANY%20certificate%20templates%20listed.%3CBR%20%2F%3E%3CBR%20%2F%3EBoth%20users%20and%20the%20computers%20they%20are%20logging%20into%20are%20on%20the%20same%20domain%20but%20receiving%20two%20different%20Enrollment%20Policy%20ID's.%20Could%20someone%20help%20me%20out%20on%20why%20that%20would%20be%3F%20It%20is%20driving%20me%20crazy%20and%20need%20to%20figure%20this%20out%20so%20I%20can%20request%20certificates%20using%20the%20certmgr.msc%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%20in%20advance!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2750179%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECertificate%20Enrollment%20Policy%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECertificate%20Issues%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor

Hello I have a question about Certificate Enrollment Policies. I am seeing two different policies on two different computers and not sure why. Both users are logged into the same domain but when I go to request a certificate from UserA using the certmgr.msc console I see "Configured by your Administrator" Active Directory Enrollment Policy ID: xxxxx-xxxx-xxxx etc.. on one computer and am able to see certificate templates listed.

When I log on as UserB on a different computer using certmgr.msc console I see "Configured by your Administrator" Active Directory Enrollment Policy ID: yyyyyy-yyyyyy-yyyyy etc.. and I don't see ANY certificate templates listed.

Both users and the computers they are logging into are on the same domain but receiving two different Enrollment Policy ID's. Could someone help me out on why that would be? It is driving me crazy and need to figure this out so I can request certificates using the certmgr.msc 

Thanks in advance!!

0 Replies