Home » Microsoft » 70-640 » Which snap-in should you use?
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template.
Which snap-in should you use?
A. Enterprise PKI
B. TPM Management
C. Certificates
D. Active Directory Users and Computers
E. Authorization Manager
F. Certification Authority
G. Group Policy Management
H. Security Templates
I. Certificate Templates
Correct Answer: I
Explanation/Reference:
Reference:
http://social.technet.microsoft.com/Forums/en/winserversecurity/thread/962be5d1-d824-4dd8-a501- 3c3a9d600083
(…) the user should have proper permission on Certificate Templates. Please follow the steps below for troubleshooting:
1. Open MMC, add Certificate Templates snap-in.
2. Double-click IPSec (Offline Request), switch to Security tab, give the user Read and Enroll rights.
3. Close and restart IE on clients computer to test.
