Microsoft KB Archive/925221

From BetaArchive Wiki
Knowledge Base


EFS certificate always tries to enroll the Basic EFS template in Windows 2000, in Windows XP, and in Windows Server 2003

Article ID: 925221

Article Last Modified on 11/20/2006



APPLIES TO

  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 Server
  • Microsoft Windows XP Professional



INTRODUCTION

By default, Encrypting File System (EFS) always tries to enroll the Basic EFS template in Microsoft Windows 2000, in Microsoft Windows XP, and in Microsoft Windows Server 2003.

MORE INFORMATION

EFS requests the Basic EFS template when EFS obtains a certificate on first use. Alternatively, EFS uses auto-enrollment. Additionally, the version 1 template of the Basic EFS is used when no certificate exists on a client computer.

When you configure a version 2 template of the Basic EFS for enhanced configuration options and you want to let users automatically obtain the EFS certificate, you must use auto-enrollment. Because version 2 template has a different name, EFS does not know if there is the version 2 template on first use.

Note When you manually request a certificate by using Microsoft Management Console (MMC), the EFS certificate works with both versions of the template. For more information about EFS, click the following link:

Keywords: kbinfo kbtshoot KB925221