Hi All,
Can someone please clarify the following please:
Do you need "Directory Email Replication" Certificate on a 2008 R2 domain controller if you are only replicating your directory using RPC and not SMTP.
Also, can you issue the "Kerberos Authentication" certificate from a 2003 ENT CA to domain controllers running 2008 R2, or do you need to upgrade your CA to at least 2008 ENT CA to support this certificate template. We are using the "Domain Controller Authentication" template currently, but I have read that you should deploy the "Kerberos Authentication" certificate as best practice.
Any help would be much appreciated.
Regards PowerShell90