To add a certification authority administrator

  1. Open Certification Authority.
  2. In the console tree, click the name of the certification authority (CA)
  3. Where?
    • Certification Authority (Computer)/CA name
  4. On the Action menu, click Properties.
  5. Click the Security tab, in Group or user names, confirm that Administrators is selected, and then click Add.
  6. In Permissions for Administrators, type the name of the group or user you want to make a CA Administrator, and then click OK.
  7. In Permissions for Added User or Group, for Manage CA, select the Allow check box.


  • To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
  • To open Certification Authority, click Start, click Control Panel, double-click Administrative Tools, and then double-click Certification Authority.

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Posts


Azure – Your account is temporarily locked to prevent unauthorized use

Here is the another common error message when dealing with directory and password synchronization.  Error Message: Your account is temporarily locked to prevent unauthorized use. Try again later. Contact Customer Support if the problem persists Read more…


Verify Service Status Remotely Using Local Account – PowerShell Script

I have modified one of my previously published script – Stop, Start, Disable Service Remotely–PowerShell Script ( to use Local account (instead of a domain account) to verify the status of the service.   Input Read more…


Collect Computer Information From Active Directory– PowerShell Script

This PowerShell script can be used to collect computer information from Active Directory.   I am searching only Windows XP and Windows 7 machines.  You can update these values  by modifying $OS1 and $OS2 variables. $OS1 Read more…