- You want to enable a Remote Desktop server to provide server authentication by using a Secure Sockets Layer (SSL) certificate.
- You configure a certificate template for Remote Desktop servers. To do this, you follow the settings that are described in the following link:
Configuring Remote Desktop certificates
Additionally, if you have these enrolled certificates automatically published to Active Directory, the size of the Active Directory database will increase significantly because of the constant re-enrollment of the certificate. And, the Active Directory replication may pause and report the following Warning event:
Then, you must update the GPO setting Computer Configuration\Policies\Administrative Templates\Windows Components\Terminal Services\Terminal Server\Security\Server Authentication Certificate Template based on the new template name, such as RemoteDesktopComputer. After the server receives the new GPO setting during the processing of the background GPO redraw, the certificates are no longer renewed on a twice-daily basis.
Important: You must set the certificate template’s attributes Template Display Name and Template Name to the same value.
Artikelnummer: 2531138 – Letzte Überarbeitung: 19.10.2011 – Revision: 1