[Wayne]

I was brought into an environment without good documentation and am trying to
figure out what types of CA's are present. I have 2 servers (both domain
controllers). One is a Root Certificate authority, the other is a
subordinate. I'm trying to determine if they are enterprise, or standalone.

Is there someway I can tell which it is? I can't find it in the MMC. Is
there a registry key that would tell me what kind it is?

I would assume they are enterprise but the previous admin wasn't very good
and left on bad terms so I can't ask and can't afford to assume.

[Paul Adare]

In article <F7807900-186D-4E01-A03F-B3B76A6487E5@microsoft.com>, in the
microsoft.public.security news group, =?Utf-8?B?V2F5bmU=?=
<Wayne@discussions.microsoft.com> says...

> Is there someway I can tell which it is? I can't find it in the MMC. Is
> there a registry key that would tell me what kind it is?
>

Run certutil -getreg ca\CAType at a command prompt on each CA.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
"The English language, complete with irony, satire, and sarcasm, has
survived for centuries without smileys. Only the new crop of modern
computer geeks finds it impossible to detect a joke that is not clearly
labeled as such."
Ray Shea