Possible to create ent sub CA in child domain?

[Guest nowandever29]

Hello,

 

We've got a parent and several child domains running Windows 2003 native

mode. We have a 2003 enteprise root certificate authority in the parent, is

it possible for me to create a subordinate enterprise certificate authority

in one of the child domains?

[Guest James McIllece [MS]]

Re: Possible to create ent sub CA in child domain?

 

=?Utf-8?B?bm93YW5kZXZlcjI5?= <nowandever29@discussions.microsoft.com>

wrote in news:ECF5BA21-3D57-49E3-B6CD-0A532ADACEA2@microsoft.com:

> Hello,

>

> We've got a parent and several child domains running Windows 2003

> native mode. We have a 2003 enteprise root certificate authority in

> the parent, is it possible for me to create a subordinate enterprise

> certificate authority in one of the child domains?

>

>

 

Yes, you can do that.

 

--

James McIllece, Microsoft

 

Please do not send email directly to this alias. This is my online account

name for newsgroup participation only.

 

This posting is provided "AS IS" with no warranties, and confers no rights.

[Guest James McIllece [MS]]

Re: Possible to create ent sub CA in child domain?

 

"James McIllece [MS]" <jamesmci@online.microsoft.com> wrote in

news:Xns9A1E8541090E6jamesmcionlinemicros@207.46.248.16:

> =?Utf-8?B?bm93YW5kZXZlcjI5?= <nowandever29@discussions.microsoft.com>

> wrote in news:ECF5BA21-3D57-49E3-B6CD-0A532ADACEA2@microsoft.com:

>

>> Hello,

>>

>> We've got a parent and several child domains running Windows 2003

>> native mode. We have a 2003 enteprise root certificate authority in

>> the parent, is it possible for me to create a subordinate enterprise

>> certificate authority in one of the child domains?

>>

>>

>

> Yes, you can do that.

>

 

Here is some additional information from the Certificate Services team:

 

"Technically, since an enterprise CA is capable of serving the entire

forest, its domain membership...is largely irrelevant. There are some

things you will want to think about, such as cert publishers group

membership, but otherwise, it really doesn't matter much.

 

--

James McIllece, Microsoft

 

Please do not send email directly to this alias. This is my online account

name for newsgroup participation only.

 

This posting is provided "AS IS" with no warranties, and confers no rights.