Based on the published certificates templates, users can request certificates from the issuing CA. I have logged into an end user PC and am going to request a certificate based on the template we just created in the previous step.
Go to Run, type MMC | Add/Remove Snap-in... | Certificates, click on the Add button.
From the list, select the computer account to manage certificates for computer object. This is depended on the template. Once selected, in next window, select Local computer as the target.
If the user is not an administrator, with default permission, it will only allow to open the Current User snap in. To open the computer account, MMC needs to Run as administrator.
Once MMC is loaded, go to the Personal ...
