Hi All,
We have setup the delegated access on Windows 2012 PKI templates as per the link : https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc725621(v=ws.10)?redirectedfrom=MSDN
The access is provided on following
Create All Child Objects permission on the following container: CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,DC=ForestRoot.
Create All Child Objects permission on the following container: CN=OID,CN=Public Key Services,CN=Services,CN=Configuration,DC=ForestRoot
Full access and ownership on the template which needs to be duplicated
Still when the delegated user tries to duplicate template he is getting the error:
Template cannot be duplicated. Access is denied
I dont want to assign him Enterprise admin rights
Can someone suggest what is the issue here and how to get this done
