Hello, one year ago we changed the RDP security for our servers (only for administrative use) to SSL. The certificates were manually requested via local certificate-mmc of the servers (computer template) and were generated from our internal Active Directory Certification Authority (Windows Server 2003 Enterprise CA) Now all certificates are expired. We thought, that the server will renew the certificates automatically 6 weeks before end of life. In the eventlog i see Event 5380 TermDD, that the old Cert will expire. Do we have to manually generate again all certificates or is there another solution? Or maybe is there a misconfiguration in our AD CA? thanks in advance regards Boris

http://blogs.msdn.com/b/rds/archive/2010/04/09/configuring-remote-desktop-certificates.aspxMy weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

http://blogs.msdn.com/b/rds/archive/2010/04/09/configuring-remote-desktop-certificates.aspxMy weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

Hi, thanks i already read this article. But we use a 2003 Active Directory and there aren't the GPO settings describesd in the article. Is it maybe possible to import the 2008 Server ADM and to use it with W2K3 servers? best regards boris

no, you can't. However, if you have a Windows Vista or newer system in your network, you can install Remote Server Administration Tools (RSAT) and use updated Group Policy Management Console (GPMC) to configure these settings.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

Hi, one more question i build the GPO via Win7 Client and it's working fine for our W2K8 systems. Is there also an easy solution for W2K3 systems? regards boris

As far as I know, Windows Server 2003 does not support this group policy setting.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki