Chấp nhận các đăng nhập mặc định điểm đến của sự kiện chuyển tiếp. 13. Loại thuê bao và nguồn phần máy tính, nhấp vào Chọn máy tính. 14. Trong hộp thoại Máy vi tính, nhấp vào nút Add Domain Máy tính. 15. Trong máy tính Select Đối với tính tương thích ngược, Windows 95 có thể chạy phần mềm MS-DOS. | 222 Chapter 5 Monitoring and Maintaining Active Directory FIGURE Root and subordinate CAs As long as the web browser purchased the certificate from a public CA that was in the trusted root authority this will work fine. If the certificate were purchased from Gibson s Cheap Certificates or some other unknown entity it would be a problem. SSL sessions would start with an error stating that the certificate wasn t trusted. From an e-commerce perspective an error stating the certificate isn t trusted is unacceptable. Imagine yourself getting ready to buy a case of widgets online. You have your credit card in hand then suddenly an error message pops us saying the certificate isn t trusted bad things will happen and it s not recommended that you continue. Most reasonable people put their credit card away. Stand-Alone Certification Authority A stand-alone CA does not need Active Directory Domain Services. Instead it s a server that is completely separate from a domain. Public certification authorities such as VeriSign or Thawte are known as stand-alone CAs. Certificate requests to stand-alone CAs are submitted via web enrollment tools or sometimes through other electronic means such as an email attachment. Once a certificate request is received the request is marked as pending. The certification authority will follow its own internal rules to determine the identity of the requestor. This can sometimes be quite involved. Once the identity of the requestor is verified the request is approved and the certificate is issued. Enterprise Certification Authority An enterprise certification authority exists within an Active Directory Domain Services domain and requires access to Active Directory Domain Services. It is used to issue Active Directory Roles 223 certificates to entities within a business or organization. Since it s intertwined with Active Directory Domain Services you can take advantage of many of the benefits within a domain such as Group Policy. For example you .
