At my work we have set up a test domain on a host server with 4 virtual machines running win svr 2008 r2 enterprise. One domain controller and 3 for CAs. I joined all to the test domain. Installed a standalone root CA. Next when I started installing the enterprise subordinate CA, the option for enterprise ca was grayed out. any suggestions on how to fix this issue?

make sure if you have logged with domain (not local) account and the account has Enterprise Admins rights.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

At first i was logged in as administrator. I created a user and added enterprise admin and domain admin but its still grayed out. Duse it matter that i'm logged in to the host and using hyper-V manager to config the servers?

As Vadims has stated, you must be logged on with an account that is a member of the local Administrators group (to install Roles) and a member of the Enterprise Admins group (to install the enterprise CA functionality). This is at the server where you are running Server Manager adding the ADCS role. This is the way it has been since Windows Server 2000. Brian

I have given all admin rights to that account. Iv installed an enterprise CA just logging in as administrator on a server. Thin we decided that it might be best to test this on a test network before rolling it out on our network.

Trust me, you have never installed an enterprise CA just logging on as an administrator on a server!!! You are incorrect. Vadims is correct. Both MS and I have confirmed he is correct. Something is wrong on your network where the CA is maybe not communicating correctly with the domain. Run nltest /sc_verify:DomainName (where DomainName is the domain name your machine is joined to) Alternatively disjoin and rejoin the domain (prior to installing ADCS of course) Brian