Disable certification authorities' update under Windows 2003 and 2008

If you are using a Thawte, a Symantec or a Sectigo / Comodo CA SSL certificate, you might have deactivated a root delivered by Microsoft (see Disable Thawte PCA (2036) root, Disable VeriSign Class 3 Public Primary Certification Authority - G5 (2036) root) or Disable COMODO RSA Certification Authority (2038) root .

To make sure this root won't be reactivated by an automatic update of Microsoft Certification authorities (Update Root Certificates), you need to deactivate this mechanism.

with Windows 2003

1. Open the control Panel and launch 'Add or Remove Programs'
2. Click on 'Add/Remove Windows Components'
3. Uncheck 'Update Root Certificates'
4. Click 'Next' then 'Finish'

With Windows 2008

1. Click 'Start' then 'Run'
2. Enter 'gpedit.msc' and validate
3. If the dialog box of the user account control appears, confirm
4. Double click on 'Administrative Templates' / 'System' / 'Internet Communication Management' / 'Internet Communication settings'
5. Double click on 'Turn off Automatic Root Certificates Update' select 'Enabled' and click 'OK'
6. You can now close the application