Can't get rid of Publik Key policy

hi there,

i configured setting (from windows 7) in computer configuration/policies/windows settings/security settings/public key policies/certificate services client - certificate enrollment policy. turn configuration model setting "not configured".

however, when check settings in gpo, there still settings remaining, did not configure e.g.
- allow users select new root certification authority trust - enabled

now, don't know can revert settings. technet article: http://technet.microsoft.com/en-us/library/cc781964(ws.10).aspx does not much. can not right click "trusted root certificate authority"

has anymore seen before? design?

thanks,
gunter

hi gunter,

i can confirm can reproduce this.
these kind of setiings have been way under windows 2003 (e.g. autoenrollment settings).
though ms promised fix windows 2008, issues remain.
ok, introduced "not configured" option missing before,
but not all settings removed expected.

i helped myself deleting corresponding .pol file on sysvol,
but of course other settings lost method.
but in situations might workaround , preferred setting complete new gpo.

---

patrick

Windows Server  >  Group Policy