Using winhttpcertcfg.exe with domain accounts

[msnews.microsoft.com]

This describes how to use the winhttpcertcfg.exe with domain accounts.

If you use winhttpcertcfg.exe as documented to grant permission to a LOCAL
account it will work.

D:\Temp>winhttpcertcfg -g -c LOCAL_MACHINE\MY -s "Patrick Henry" -a
IWAM_PATRICK3
Microsoft (R) WinHTTP Certificate Configuration Tool
Copyright (C) Microsoft Corporation 2001.

Matching certificate:
CN=Patrick Henry
OU=XXX
O=Some Company
L=City
S=ST
C=US
E=em...@company.com

Granting private key access for account:
TRONNIER\IWAM_PATRICK3

If you use winhttpcertcfg.exe as documented to grant permission to a DOMAIN
account you will get the following error:

D:\Temp>winhttpcertcfg -g -c LOCAL_MACHINE\MY -s "Patrick Henry" -a
TRONNIER\IWAM_PATRICK3
Microsoft (R) WinHTTP Certificate Configuration Tool
Copyright (C) Microsoft Corporation 2001.

Matching certificate:
CN=Patrick Henry
OU=XXX
O=Some Company
L=City
S=ST
C=US
E=em...@company.com

Error: No account information was found.

To fix this you must use the user...@domain.com format instead of the
domain\username format.

D:\Temp>winhttpcertcfg -g -c LOCAL_MACHINE\MY -s "Patrick Henry" -a
IWAM_P...@TRONNIER.ORG
Microsoft (R) WinHTTP Certificate Configuration Tool
Copyright (C) Microsoft Corporation 2001.

Matching certificate:
CN=Patrick Henry
OU=XXX
O=Some Company
L=City
S=ST
C=US
E=em...@company.com

Granting private key access for account:
TRONNIER\IWAM_PATRICK3

[BB]

Just wondering.. why would you grant access
to private key ?

--
Regards,
Bernard Cheah
http://support.microsoft.com/

"msnews.microsoft.com" <ptro...@hotmail.com> wrote in message
news:uNFlqQJ#CHA....@TK2MSFTNGP11.phx.gbl...