Re: Best Place to Install an Enterprise CA

[Guest Paul Bergson [MVP-DS]]

Don't load on a DC. This would be best asked in the security NewsGroup.

 

I have copied them in on this thread.

 

--

Paul Bergson

MVP - Directory Services

MCTS, MCT, MCSE, MCSA, Security+, BS CSci

2008, 2003, 2000 (Early Achiever), NT4

 

http://www.pbbergs.com

 

Please no e-mails, any questions should be posted in the NewsGroup This

posting is provided "AS IS" with no warranties, and confers no rights.

 

 

"Mike L" wrote in message

news:342466FB-9DBF-4422-A2EB-EF1270E766DC@microsoft.com...

>I have an enterprise root CA installed on a member server that i need to

> decomission and wanted to know the recommended place to install the

> service.

>

> I have seen in a lot of the discussions where users install the service on

> their domain controllers. Is the best place to install the service? I want

> to

> be able to browse out to the CA website and I always thought it was a bad

> idea to load IIS on a domain controller.

>

> Can someone please give me some feedback on this?

>

> Thanks