Comments on: Major Headbanging with WSSv3 + Extranet Collaboration Toolkit on Windows Server 2008

By: Don

Don — Tue, 08 Dec 2009 03:00:33 +0000

On doing the certreq -submit step I was getting the error “Certificate not issued (Denied) Denied by Policy Module 0×80094801, The request does not contain a certificate template extension or the CertificateTemplate request attribute.”

My environment: CA server is 2008, while extranet server is Server 2003. I had to change the command to drop the inverted commas around the certificate template detail:

certreq -attrib CertificateTemplate:WebServer -submit c:\request.req c:\certnew.cer

Thanks for the helpful article!

By: Claus

Claus — Tue, 24 Mar 2009 13:24:42 +0000

The applicationPool account running the collaboration account must be a member of the “Farm administrators” in Central Admin. This is because the sitecreation use’s this account.

By: Adam

Adam — Wed, 08 Oct 2008 17:55:24 +0000

Update: The current roadblock is adding external users. I get a “General Access Denied” error. Everything up through Site Creation and Approval is working and I feel like this is the last step before we hit full steam ahead.

By: Adam

Adam — Tue, 07 Oct 2008 18:32:05 +0000

Henry, first, this has been a great help and I’m sorry to hear about your MSFT debacle.

I have a few notes that I should probably write down before I forget, but for now the reason that the ects_sharepoint script doesn’t work is that I assume you are trying to run it logged in as your SharePoint service account. A CMD prompt, by default in Server 2008, does not run with admin priv’s even if you are logged into an account with local admin rights. So, by using runas you can open a cmd prompt under the admin guise and successfully execute the script without all the extra work you had to do.

The other wierd thing is the SSL Cert request. In my INF file, where it says in the documentation to put the name of the DC, it took me a bit to realize that they meant DC as in the server hosting AD LDS, not the DC/CA. But that was more of a DUH! moment than anything else. But thought maybe other users might make the same gaff.

Last, I’m runnning SQL2008 and I had to change the SQL script to use the 100 directory instead of the 90 directory.

Thanks again for putting this together!

By: Dan Barua

Dan Barua — Thu, 31 Jul 2008 12:49:40 +0000

Well I’m a complete and utter sharepoint n00b but i’m glad i found something that was helpful!