Re: Certificate Templates and Auto-Enrollment

From: Shawn Corey [MSFT] (
Date: 03/16/05

Date: Tue, 15 Mar 2005 17:18:55 -0800

About the only way to do this is to duplicate the template so that you have
a V2 template and setup the new template for Auto-Enrollment. This does
require that all clients are running XP and that the CA is WS2003 Enterprise

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
"James Fabulous" <> wrote in message 
> Can anyone tell me if it's possible to modify the Code Signing certificate
> template that Microsoft includes as part of the MS Certificate Authority 
> to
> auto-enroll like you can do with user certificates.
> Background: We are using enterprise wide code signing certificates along
> with very high security for macro's in office (MSExcel) documents.
> Currently users are self-signing, I have tested using enterprise code
> signing certificates but would like to reduce the amount of user
> intervention by setting up auto-enrollment so that when users log into the
> domain they automatically obtain a code signing certificate for those
> purposes.
> Thanks!