How to automatically enroll user and computer certificate in AD

首先查詢下面的文章：

How to automatically enroll user and computer certificate in AD

<a href="http://www.rickygao.com/how-to-automatically-enroll-user-and-computer-certificate-in-ad/" target="_blank">http://www.rickygao.com/how-to-automatically-enroll-user-and-computer-certificate-in-ad/</a>

為了避免通路出現什麼問題，可以直接檢視附件中的xps 檔案内容

同時通過下面的文章已經提到關于根證書的部署：

Distribution of root certificate with Windows AD Certificate Services

<a href="http://serverfault.com/questions/358994/distribution-of-root-certificate-with-windows-ad-certificate-services" target="_blank">http://serverfault.com/questions/358994/distribution-of-root-certificate-with-windows-ad-certificate-services</a>

When you install an enterprise root CA, it uses Group Policy to propagate its certificate to the Trusted Root Certification Authorities certificate store for all users and computers in the domain.

也就是說更證書 如果是部署的是 Enterprise的CA的話 根證書會自動通過組政策下發出去，下發到“Trusted Root Certification Authorities” 中

<a href="http://down.51cto.com/data/2367197" target="_blank">附件：http://down.51cto.com/data/2367197</a>

本文轉自 zhangfang526 51CTO部落格，原文連結:http://blog.51cto.com/zhangfang526/1725948

<a href="http://blog.51cto.com/search/result?q=how+to+auto+enroll+u" target="_blank">how to auto enroll u</a>