locked
adprep /forestprep - 2008 Certificate services RRS feed

  • Question

  • Hi,

    Assuming that id the domain functional level is 2008 then I dont need to run adprep /forestprep as the schema will already be correct : Yes / No ?

    in a W2k Domain - I know I can install a W2k8 Cert services box - and had it running OCSP.

    Can I assume that running the adprep /forestprep is so that Windows 2003 / 2000 boxes can also use OCSP - or will OCSP "look" like its working but clients such as Windows 7 will not use it because the "domain" don't understand it because I haven't extended the schema?

    If we already 2003 domain with a w2k8 cert server and the adprep /forestprep has "not" been run. can this be ran "after the fact"?? so the 2k3 boxes get all the goodies such as NDES, CNG support... or do I need to do something else? sun some sort of subsequent command? or do I need to break / rebuild NDES / OCSP responders?

    Thanks for any information and apologies if I said something dumb - I learn more being dumb ;)

    Thursday, June 13, 2013 1:58 PM