Hi Overon,
I'm sorry to write in english but my German is even worse.
I have the exact same problem using W3K SE and ActivIdentity (formerly ActivCard) CMS.
However this is what support from AI says:
"The issue might come from the Service Pack 1 of Windows 2003 that removes some access rights, even to the LDAP administrator.
I suggest that you check the required permissions on the LDAP for CMS, this can be done:
using a LDAP browser,impersonating with the CMS credentials, binding to relevant LDAP,
enumerating objects from the upper level of the LDAP, expanding LDAP tree under configuration services public key services certificate templates enrollment services For each of the above objects read access should be allowed or managed accordingly with LDAP administrator.
"
I wonder if you allready solved this problem and how.
Kind regards, jruijgrok
