User needs Admin privileges to install a certificate???

Question

_{Thursday, May 15, 2008 12:07 AM}

Our users run their desktop sessions in Windows 2003 Terminal Services via Citrix.  There is a particular website they need to access that installs a unique certificate per user account.  With our standard configuration, the user is unable to install the certificate causing the browser application to fail.  If we add the user to the local Administrator group, they can install the certificate fine.

This leads me to believe that there are specific permissions required on the server to allow the users to access this website and install certificates.

Anyone have any ideas what those permissions are or how to about finding that out?

All replies (1)

_{Thursday, May 15, 2008 6:35 AM ✅Answered}

Hello Euge,

From your description, users on the Windows 2003 Terminal Services fail to install the certificate by the web enrollment through web browser. I perform a test of a standard user requesting and install a user certificate via terminal session. It works well without any error.

I'd like to know the phase of enrollment where the browser fails and what error message the browser gives. Generally, the browser should be configured to enable scripting for web enrollment. Could you please capture a snapshot where the browser gets error and send to me?

Please send the screen shot file to [email protected]

Note:

a. Please include the following three lines for this issue in the email body:

User needs Admin privileges to install a certificate???

http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=3344841&SiteID=17

Miles Li - MSFT

b. We will continue to discuss the issue here in the forum and will NOT reply via emails.

c. Pease post a quick note in the current thread to inform me after sending the email.

Thanks.