root CA and Windows 2003

[HeathRamos]

I currently have a stand alone root CA on a Windows 2000 server and need to move it to a Windows 2003 Server.

I use certifcates currently for OWA, WSUS and VPN but I am considering using it with wireless security as well in the future (set up a radius server).

Should I use an Enterprise root CA in Windows 2003 instead?

I assume since the stand alone CA didn't alter active directory, I can have both installed for the time being.

 

[basst]

If all your servers are joined to your domain running AD and you only need certificates for internal use it would make sense to use an Enterprise Root CA.
You then have the benefits of being to install certificates on clients much easier using GPO's.

 

[HeathRamos]

All servers are part of the Windows 2000 domain but one of the certificates needs to be installed on the Exchange Server for external use as well.