Re: Certificate Templates and Auto-Enrollment

From: Shawn Corey [MSFT] (shawncor_at_online.microsoft.com)
Date: 03/16/05


Date: Tue, 15 Mar 2005 17:18:55 -0800

About the only way to do this is to duplicate the template so that you have
a V2 template and setup the new template for Auto-Enrollment. This does
require that all clients are running XP and that the CA is WS2003 Enterprise
Edition.

-- 
Thanks,
Shawn
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at 
http://www.microsoft.com/info/cpyright.htm
"James Fabulous" <James.Fabulous@hotmail.com> wrote in message 
news:udwapIOKFHA.1308@TK2MSFTNGP15.phx.gbl...
> Can anyone tell me if it's possible to modify the Code Signing certificate
> template that Microsoft includes as part of the MS Certificate Authority 
> to
> auto-enroll like you can do with user certificates.
>
> Background: We are using enterprise wide code signing certificates along
> with very high security for macro's in office (MSExcel) documents.
> Currently users are self-signing, I have tested using enterprise code
> signing certificates but would like to reduce the amount of user
> intervention by setting up auto-enrollment so that when users log into the
> domain they automatically obtain a code signing certificate for those
> purposes.
>
> Thanks!
>
>