The "Turn off Automatic Root Certificates Update" policy does not appear in the Rsop.msc tool on a computer that is running Windows XP Professional SP2 or Windows Server 2003 SP1 (909561)

WORKAROUND

Method 1: Use the Operating System Group Policy Result tool (Gpresult.exe)

1. Click Start, click Run, type cmd in the Open box, and then click OK.
2. At the command prompt, type the following command:

   Gpresult /z

   Additionally, you may append the following command at the end of the Gpresult /z command to export the result to a text file:

   > file_name

   Note file_name is a placeholder for the file name.
3. At the command prompt or in the exported file, locate one of the following messages:
   • For Windows Server 2003 with SP1:

     GPO: Local Group Policy
                     KeyName:     Software\policies\Microsoft\SystemCertificates\AuthRoot\DisableRootAutoUpdate
                     Value:       1, 0, 0, 0
                     State:       Enabled

   • For Windows XP Professional SP2:

     GPO: Local Group Policy 
                     Setting:  Software\Policies\Microsoft\SystemCertificates\AuthRoot 
                     State:    Enabled

Method 2: Use the Group Policy Management Console tool (Gpmc.msc)

1. Click Start, click Run, type Gpmc.msc in the Open box, and then click OK.
2. In the Group Policy Management right-click Group Policy Result, and then click Group Policy Result Wizard. Follow the steps in the wizard to obtain a new file for the group policies that apply to the appointed user account.
3. Click the new file that you created in step 2, click the Setting tab, expand Administrative Templates, expand System/Internet Communication Management/Internet Communication settings, and then view the following table:

   Policy	Setting	Winning GPO
   Turn off Automatic Root Certificates Update	Enabled	Local Group Policy