Method 1:
Use the certutil command:
certutil -cainfo

Method 2:
Check if there is a Certificate Templates folder in the certificate console. Certificate Templates only appears if the certificate authority is an enterprise CA.
In this screenshot we have a stand alone CA:

Method 3:
The "Cert Publishers" Active Directory group. All members of this group are enterprise certificate authorities.
Great stuff. CLI is the best.
ReplyDelete