Monday, January 07, 2013 11:19 AM
I found on some occasion you can't import a third party root ca (to the trusted zone) when you run certmgr.msc,
But if I add a mmc control manually and select "Computer account", the import procedure was successful.
So anyone know the difference between them?
- Moved by Cheers ZHANGMicrosoft Contingent Staff, Moderator Tuesday, January 08, 2013 2:15 AM (From:General)
Tuesday, January 08, 2013 8:22 AM
Entire certificate store is divided to a multiple context:
One context for Local System account
One context per each registered user (including service accounts)
when you add certificate to "current user" store, new certificate will be recognized only by current user. Other users will not recognize it. When you add certificate to computer account store, it is propagated to all users.
It is very similar to user profiles. When you add shortcut to your own desktop, only you see it. When you add shortcut for all users (%alluserprofile%\desktop), it will appear on each user desktop. Does this makes a sense?
- Marked As Answer by c0debreak Tuesday, January 08, 2013 8:54 AM