Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. You install an Enterprise root certification authority (CA). You create a child domain.
You add the computer account of the CA server to the Certificate Publishers Active Directory security group in the child domain. You need to ensure that all users in the child domain can enroll Computer certificates.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.
Configure Computer certificate auto – enrollment for all users in the child domain.
B.
On the CA server, create a Computer certificate template for the child domain.
C.
On the CA server, select the Publish certificate in Active Directory option for the Computer certificate template.
D.
On the CA server, configure the Read and Enroll permissions for the Computer certificate template for all users in the child domain.