Mar 2, 2020, 3:03 AM
This article will walk you through editing a GPO for Certificate Enrollment.
Certificate Services Client - Certificate Enrollment Policy - These are the settings that define the URL for the policy servers which users and computers will contact. By default (in a newly created GPO), these setting will be set to "Not Configured", and will need to be changed to "Enabled". When you enable it, it will have a default Certificate Enrollment Policy (CEP) in the list called Active Directory Enrollment Policy, and it will be set as the default.