A. Windows 2003 includes a new version of xenroll.dll (an ActiveX control that can create certificates) that prompts users of previous Windows versions to download an ActiveX control when requesting a certificate. To resolve this problem, go to the Windows 2003 certificate server and perform the following steps:
- Log on as an Administrator.
- Open \%systemroot%\system32\certsrv\certdat.inc in a text editor.
- Locate the sXEnrollVersion="5,131,3686,0" entry, then modify the entry to
- Save the changes, then close the text editor.