Need help configuring AD/certificate authority/group policy settings for specific problem

[LOFBenson]

I need the ability to make changes to the Microsoft Office 2000 digital signature "trusted sources" for macros list for multiple users without having to log on the each system and run a file containing each digital signature. This feature does not seem to be part of the Office 2000 resource kit policy editor.

I have:
a Windows 2000 domain setup (windows 2000 schema)
a Windows 2003 server running as an Enterprise Certificate Authority
Office 2000 installed for all users

Since the CA is 2003 and I havn't updated the schema yet, the certificates will not automatically publish into AD but I can manually copy them over for the users that need them. Is there some way I can set it so that certain certificates are always trusted for code signing by certain other users in AD or group policy?

 

[calbars]

have you installed your w2k3 root ca certificate as a trusted root CA in AD via group policy?

(Computer config -> Windows Settings -> Security Settings -> Public Key Policies -> Trusted Root CA)

 

[LOFBenson]

yes i did that