Your network contains an Active Directory domain named contoso.com.
The domain contains an enterprise certification authority (CA).
You need to deploy certificates based on Version 1 templates to all of the computers in the
domain. The solution must minimize administrative effort.
You create a Group Policy object (GPO) named GPO1 and link the GPO to the domain.
What should you do next?
A.
In GPO1, configure Certificate Services Client – Certificate Enrollment Policy.
B.
In GPO1, configure Automatic Certificate Request Settings.
C.
In GPO1, configure Software installation.
D.
Duplicate the templates. In GPO1, configure Software installation.
Explanation:
Automatic certificate request settings
Certificate enrollment is the process of requesting, receiving, and installing a certificate. By
using automatic certificate settings in public key policies, you can have computers that are
associated with a Group Policy object (GPO) automatically enroll for certificates. This can
save you the step of explicitly enrolling for computer-related certificates for each computer.
After you establish an automatic certificate request, the actual certificate requests occur the
next time the computers associated with the GPO log on to the network.