JSI Tip 7601. When a user requests a certificate from a Windows Server 2003 CA, they are prompted to download an ActiveX control?

When the user tries to install the ActiveX control, it is likely to fail as they do NOT have administrative authority.

This behavior will occur if the server has a newer version of Xenroll.dll than the version on the user's computer.

To prevent this behavior:

1. Use NotePad to open the %SystemRoot%\System32\Certsrv\Certdat.inc file on the server.

2. Change the line that contains sXEnrollVersion="5,131,3686,0" to be sXEnrollVersion="5,131,3659,0".

3. Save the file and exit NotePad.