Certificate enrolment.

DevilWAH

ho can I do this?

I want to have it so a PC connected to the and a member of the AD domain, and a valid logs in to download a user certificate via auto enrolment.

However I want people to also be able to log in via the active directory certificate web service and down load the certification to non domain PC's, but this time only once a manager has approved he request.

So question is can you set a user cert to auto enrol, but only from a domain PC.

IF so I can have two user certs, one for domain PC's that auto enrols, and one for web enrolment that requires aproval.

Cheers