Under either user configuration or computer configuration, in the branch "windows settings > security settings > public key there should be an option "Trusted root certificates" where you can import a root cert to be distributed to users or computers. Kind regards, Jake Langerak Itium ICT Van: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] Namens Hamilton, Ronnie Verzonden: donderdag 31 januari 2008 13:41 Aan: gptalk@xxxxxxxxxxxxx Onderwerp: [gptalk] security certificate question HI, been locking down a user GPO to basically tie everything down and allow IE to be used for a web application. When the user goes to the web site they are asked to always trus a certificate. Can I do this via the User --> security settings -->Public Key Policies -->Enterprise Trust and then import the cert. Does this need to be done on the DC or were is the cert held. Also would I need to get the sert from the company running the web site. Or is there an easier way to do this in some GPO setting. thanks Ronnie Ronnie Hamilton CCNA Lufthansa Airmotive Ireland Naas Road Tel : 01 4011253 LTAI Visit our website : www.ltai.ie Jake Langerak ITIUM - Partners in ICT Keizersgracht 442 1016 GD AMSTERDAM The Netherlands T: +31 (0)20 - 620 81 99 F: +31 (0)20 - 623 06 79 __________________________________________ Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg. No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin. Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole, Co.Dublin. __________________________________________ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please advise by return email and delete all copies of the message.