Skip to the main content.

1 min read

How to find a Certificate Authority in your Active Directory environment

Most of the projects I work include certificates in some form or fashion.  Often the Certificate Authority is something that someone set up once for a specific purpose and forgot about it.  When I ask, they can’t tell me which server is their CA.  There are a couple of ways to locate the Certificate Authority(ies) in your Active Directory environment.

stay up to date on all microsoft announcements

  • Check the members of the Cert Publishers group in AD.  This is a built in group in Active Directory. image 

 

  • Use the certutil utility from a cmd prompt to determine the CA name and the server hosting the service.  This utility is available on newer Windows OSes (I’ve only tried on Windows 2008 R2).  This command is particularly useful because it tells you the CA name as well as the server hosting it.  The Cert Publishers group will only tell you the server hosting the service.  (Thanks to Greig in Sydney for this find.)
    certutil –config – -ping

    image 

embracing a cloud migration

Automapping Mailboxes in Exchange 2010 and Outlook

There is a nice new feature in Exchange 2010 with Outlook 2007/2010/2013, called automapping. Autodiscover automatically maps all mailboxes in...

Read More

OCS 2007 Port Requirements

Office Communication Server 2007 has a number of port requirements that are specific to the feature that you will be deploying. The following diagram...

Read More

AD: Checking Active Directory prerequisites for Exchange Server 2010 SP1

This article will discuss preparing your AD environment for Exchange Server 2010 SP1. Before installing Exchange 2010 into your AD environment you...

Read More