Hello all.. I am facing a problem... We have 2dc 1root and 1child domain.. all my servers are joined in the root domain (CA also) all my users are joined to child domain.. the problem i am facing is the following.... the only way my users to encrypt mails is to press manually the publish to GAL otherwise the procedure doesn't work automatically. After a research i made i found out that if the user doesn't press the publish to GAL his/her certificate is not in AD (tab published certificate) if the user press the publish to GAL his/her certificate is on the AD (tab published certificate).

On Sun, 2 May 2010 19:22:21 +0000, dkotix wrote: >I am facing a problem... We have 2dc 1root and 1child domain.. all my servers are joined in the root domain (CA also) all my users are joined to child domain.. the problem i am facing is the following.... the only way my users to encrypt mails is to press manually the publish to GAL otherwise the procedure doesn't work automatically. After a research i made i found out that if the user doesn't press the publish to GAL his/her certificate is not in AD (tab published certificate) if the user press the publish to GAL his/her certificate is on the AD (tab published certificate). Exchange isn't involved in the management of certificates or the AD or the CA. You'd get a better answer asking the question in one of the Windows Server forums. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP