Question

In addition to the permissions required on the certificate templates used for autoenrollment, what other requirements must be met to support autoenrollment in your organization?

Answer 1

The issuing CA must be a standalone and separate, CA and Group Policy must be configured to support autoenrollment

Step-by-step explanation:

Auto-enrollment is a valuable feature of the Active Directory Certificate Services (AD CS). It allows the admin to organize and configure subjects to automatically register for certificates, renew expiring certificates and retrieve issued certificates without the need for subject interaction.

To activate autoenrollment In the Certification Authority MMC, click on Certificate Templates. Toggle over to the Action menu, point to New, then click on Certificate Template to Issue. The Enable Certificate Templates dialog box is expected to open. In the Enable Certificate Templates, click the certificate template’s name that you just configured, and then click OK.