A. Windows 2003 includes a new version of xenroll.dll (an ActiveX control that can create certificates) that prompts users of previous Windows versions to download an ActiveX control when requesting a certificate. To resolve this problem, go to the Windows 2003 certificate server and perform the following steps:

  1. Log on as an Administrator.
  2. Open \%systemroot%\system32\certsrv\certdat.inc in a text editor.
  3. Locate the sXEnrollVersion="5,131,3686,0" entry, then modify the entry to sXEnrollVersion="5,131,3659,0"
  4. Save the changes, then close the text editor.