sab4you
IS-IT--Management
- Jan 30, 2003
- 269
Another admin installed a CA on a file server for testing purposes. Not sure how/what was configured, but according to the admin, we are not using any certificates from it, and its not needed.
All is fine and dandy until I create a new domain controller and use dcpromo to promote it. The promote fails, and after diagnosing and figuring it out, its because the built in windows firewall on the file server was blocking rpc ports to the new DC to allow it to communicate and get a 'domain certificate' from the certificate server.
Now my question is, did the CA install somehow integrate into our 2003 domain? Can we uninstall it, or is it now a part of it and cannot be uninstalled without issues?
All is fine and dandy until I create a new domain controller and use dcpromo to promote it. The promote fails, and after diagnosing and figuring it out, its because the built in windows firewall on the file server was blocking rpc ports to the new DC to allow it to communicate and get a 'domain certificate' from the certificate server.
Now my question is, did the CA install somehow integrate into our 2003 domain? Can we uninstall it, or is it now a part of it and cannot be uninstalled without issues?