Microsoft KB Archive/264589

= Duplicate Certificate Templates Appear in Active Directory =

Article ID: 264589

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server

-



This article was previously published under Q264589



SYMPTOMS
Duplicate certificate templates may appear in Active Directory when you attempt to create or modify an Automatic Certificate Request, Public-Key Policy.



CAUSE
This behavior occurs when an additional Enterprise Certificate Authority (CA) is installed in Active Directory before the certificate template objects are completely replicated throughout the enterprise. When this happens, a replication collision occurs.



RESOLUTION
To resolve this issue, use the following steps:  Click Start, click Run, type dssite.msc, and then press ENTER. Click View from the list, and then click Show Services Node. Expand the Services node. Expand Public Key Services. Click Certificate Templates.  The right side of the screen is populated with certificate templates. Select all objects that have a Globally Unique Identifier (GUID) at the end of the object name, as shown in the following example: <pre class="fixed_text">  Machine|CNF:486198d0-d3ce-4dcd-82... </li> Press DELETE.</li> Allow intra-site and inter-site replication to finish before you add any additional Enterprise CAs.</li></ol>

<div class="moreinformation_section">

MORE INFORMATION
For additional information about replication collision, click the article number below to view the article in the Microsoft Knowledge Base:

218614 Replication Collisions in Windows 2000

Keywords: kbactivedirectoryrepl kbcertservices kbenv kbgpo kbppkey kbprb kbschema KB264589

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.