-
Book Overview & Buying
-
Table Of Contents
-
Feedback & Rating

Active Directory Administration Cookbook, Second Edition
By :

Certificate autoenrollment allows admins to configure users and computers to automatically enroll and renew certificates. This recipe shows how to configure certificate autoenrollment.
Certificate autoenrollment is a feature of enterprise CAs. It cannot be configured on a standalone CA.
For certificate autoenrollment to work, the CA that issues the certificate needs to run Windows Server 2003 or a newer version. Active Directory needs to run the Windows Server 2003 schema or a newer version.
To create a Group Policy Object (GPO) and manage its settings, sign in to a system with the Group Policy Management Console installed with an account that is a member of the Domain Admins group.
To configure certificates for autoenrollment, sign in to an enterprise CA with an account that is a member of the Enterprise Admins group.
Certificate autoenrollment is based on Group Policy. Perform these steps...