Hello, for Security please use the following forum http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hello, for Security please use the following forum http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

You should consider to close the link and continue your work. Even if you delete them, they will be installed back, once they are requested. This is because a copy of all certificates is stored in Crypt32.dll library and Windows Update. And if any of the CA become compromised, Microsoft will immediately react appropriately (publishes updated root list via windows update).My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

Hi, Trusted Root Certification Authorities: Implicitly trusted CAs. Includes all of the certificates in the Third-Party Root CAs store plus root certificates from your organization and Microsoft. The KB you provide about Trusted root certificates that are required are related to may limit functionality of the operating system or may cause the computer to fail. Hope this helps! Best Regards Elytis Cheng TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.Elytis Cheng TechNet Community Support

Hi, Trusted Root Certification Authorities: Implicitly trusted CAs. Includes all of the certificates in the Third-Party Root CAs store plus root certificates from your organization and Microsoft. The KB you provide about Trusted root certificates that are required are related to may limit functionality of the operating system or may cause the computer to fail. Hope this helps! Best Regards Elytis Cheng TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.Elytis Cheng TechNet Community Support

Hi, Bottom line, the KB says that I shouldn't delete two certs. I infer that all other certs can be deleted, at the risk of web browsing not working as expected. >> The KB you provide about Trusted root certificates that are required are related to may limit functionality of the operating system. it means if you delete other certs except the 3 certs, it can only ensure the OS basic running. Trusted Root Certification Authorities: Implicitly trusted CAs. Includes all of the certificates in the Third-Party Root CAs store plus root certificates from your organization and Microsoft. if you delete all except the 3 certs, the Third-Party Root CAs cannot be trust. In addition, I'd like to share some useful articles for your reference: Certificate Chaining Engine (CCE) http://social.technet.microsoft.com/wiki/contents/articles/3147.aspx Troubleshooting Certificate Status and Revocation http://technet.microsoft.com/en-us/library/cc700843.aspx Hope this helps! Best Regards Elytis ChengElytis Cheng TechNet Community Support

Hi, Bottom line, the KB says that I shouldn't delete two certs. I infer that all other certs can be deleted, at the risk of web browsing not working as expected. >> The KB you provide about Trusted root certificates that are required are related to may limit functionality of the operating system. it means if you delete other certs except the 3 certs, it can only ensure the OS basic running. Trusted Root Certification Authorities: Implicitly trusted CAs. Includes all of the certificates in the Third-Party Root CAs store plus root certificates from your organization and Microsoft. if you delete all except the 3 certs, the Third-Party Root CAs cannot be trust. In addition, I'd like to share some useful articles for your reference: Certificate Chaining Engine (CCE) http://social.technet.microsoft.com/wiki/contents/articles/3147.aspx Troubleshooting Certificate Status and Revocation http://technet.microsoft.com/en-us/library/cc700843.aspx Hope this helps! Best Regards Elytis ChengElytis Cheng TechNet Community Support

Hi, Thanks for posting in Microsoft TechNet forums. As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as Answered as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish. BTW, wed love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts. Best Regards Elytis ChengElytis Cheng TechNet Community Support

Hi, Thanks for posting in Microsoft TechNet forums. As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as Answered as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish. BTW, wed love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts. Best Regards Elytis ChengElytis Cheng TechNet Community Support