Greetings Programs!

In this installment of the series, we set up the Active directory plumbing needed to do Certificate Autoenrollment for users and computers, and then we test it.  In the vein of the series, rather than taking defaults which are often not the best idea in a production network, we build things up in a more realistic manner.

In addition to learning how to set up auto enrollment, if you follow along, you’ll get some practice in doing some basic windows sysadmin including creating users, groups and organizational units, creating group policy objects, and most importantly working with certificate templates.

As usual, I included some links of interest at the bottom.

Happy labbing!

configuring Certificate Autoenrollment: https://technet.microsoft.com/en-us/library/cc731522(v=ws.11).aspx

Troubleshooting Certificate Autoenrollment:  https://social.technet.microsoft.com/wiki/contents/articles/3048.troubleshooting-certificate-autoenrollment-in-active-directory-certificate-services-ad-cs.aspx