Microsoft KB Archive/818026

= User Is Prompted to Download ActiveX Control When Requesting Certificate =

Article ID: 818026

Article Last Modified on 5/11/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Web Edition

-



SYMPTOMS
When a non-administrator user tries to request a certificate from the certification authority (CA) on a Windows Server 2003 computer, the user is prompted to download and install an ActiveX control. The user may not be able to install the ActiveX control if they are not logged onto the computer as an Administrator.



CAUSE
This issue may occur if the Windows Server 2003 computer uses a more recent version of the Xenroll.dll file than the version used by the user's computer.



RESOLUTION
To resolve this issue, edit the Certdat.inc file on the server. To do this, follow these steps:  On the server, use Notepad to open the Certdat.inc file. By default, the file is installed in the following folder:

%windir%\System32\Certsrv

 Locate the following line:

sXEnrollVersion=&quot;5,131,3686,0&quot;

 Edit the line so that it appears as follows:

sXEnrollVersion=&quot;5,131,3659,0&quot;

 Save, and then close the file.



STATUS
Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.

Keywords: kbpending kbbug KB818026

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.