To enable Autoenrollment in your domain, take a look at these instructions:
- Log into your CA server and open up Certification Authority. Expand the name of your CA, then right-click on Certificate Templates and choose Manage.
- Now choose which certificate template that you want to be set up for Autoenrollment. I have a template called DA Cert that I want issued to every computer in my network. Right-click on DA Cert and head into Properties.
- Click on the Security tab. Here you need to configure whatever users, computers, or other objects that you want to have Autoenroll permissions to this template. I am going to Allow the Autoenroll permission for all Domain Computers in my network, as shown in the following screenshot: ...