Basic User & Local Certficates
We're running through a demo of VMWare View and Windows 7 Enterprise. All working well, except for one issue. Domain users, who are just assigned basic user rights on the Windows 7 desktops, cannot see the local computer certificate store.
So, even though I'm pushing out Trust Root Certs via group policy, it doesn't matter because the local users can't even see them. While logged as a basic user and hitting MMC/Add-Remote Snapin/ and choosing Certificates, the only option I get is for
the current user. No option of the local computer. This is causing a ruckus as we have a number of self-signed certs that we need the users to trust, but don't want them getting prompted to install the cert.
Is there a way to grant basic users the permission to see the local cert store? Only Admins can see it.
January 24th, 2011 10:37am
Hi,
Thanks for posting in Microsoft TechNet Forum.
You could try to open a previously saved console. The process is like this:
1.
As administrator open MMC | Certificates | Local Computer
2.
Save the console (Ctrl+S) with name Certificates - Local Computer.msc
3.
Log on with basic user open MMC and open Certificates - Local Computer.msc
Hope it helps.
Alex Zhao
TechNet
Subscriber Support
in forum.
If you have any feedback on our support, please contact
tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
January 25th, 2011 5:08am
Hi,
I am just writing to check the status of this thread. Was the information that I provided in my previous reply helpful to you?
If you have any further questions or concerns, please feel free to let us know.
Have a good day!
Alex Zhao
TechNet
Subscriber Support
in forum.
If you have any feedback on our support, please contact
tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
January 26th, 2011 9:09pm
Hi,
As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps
should be helpful for many similar scenarios.
If the issue still persists and you want to return to this question, please reply this post directly so we will be notified to follow it up. You can also choose to
unmark the answer as you wish.
In addition, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems.
Thanks!
Alex Zhao
TechNet
Subscriber Support
in forum.
If you have any feedback on our support, please contact
tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2011 5:05am