none
Certificate for computers not getting enrolled automatically

    Question

  • Hi,

    In my environment i have seen an intermittent behaviour where some of computers get an certificate enrolled automatically through GPO but on some systems it does not happen.

    There is not change in policy.

    Does any one has come across in such issue, if so please help if any.

    Regards,

    Deepak S

    Wednesday, April 29, 2015 10:34 AM

Answers

  • Hi Deepak S,

    >>In my environment i have seen an intermittent behaviour where some of computers get an certificate enrolled automatically through GPO but on some systems it does not happen.

    Based on the description, we can run command gpresult/h report.html with admin privileges to collect group policy result report to check how group policy settings are getting applied on the computers in question.

    Regarding using group policy to configure certificate auto-enrollment, the following article can be referred to for more information.

    Configure Certificate Autoenrollment

    https://technet.microsoft.com/en-in/library/cc731522.aspx

    Besides, for certificate questions, we can also try to ask for suggestions in the following security forum.

    Security

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserversecurity

    Best regards,

    Frank Shen


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, April 30, 2015 7:11 AM
    Moderator