Does anyone know if it is possible to set up a .NET (Enterprise Edition) server to be a Subordinate Enterprise CA under a Windows 2000 Root Enterprise CA? We were hoping to take advantage of the .NET Enterprise PKI functionality without having to purchase 2 .NET Enterprise Server licenses. I have this configuration set up in a test environment, but recieved an “Access denied by Policy Module” error message on the .NET server when trying to request a Subordinate CA certificate. I checked the permissions on the Sub CA template and everything looks ok there. I also checked to make sure that both CA computer accounts were in the Cert Publishers group in AD. If anyone could give me any ideas as to if this can even work, I would greatly appreciate it. THANKS!!!