I need to renew a certificate on my Exchange box but whenever I try to (or, for that matter, if I try to get a new certificate) I get the error "The permissions on the certificate template do not allow the current user to enroll for this type of certificate". I am logged on as a Domain Admin and I verified that the Domain Admins group does have Enroll permission on the template (Web Server). I even added the admin account I am using specifically on the template with read/write/enroll permission but no change.
Have I missed something? This seems pretty straight forward and when I search on this error, every hit I've seen says, like the error, that I don't have the necessary permission to enroll using that template. But I do.
Bert