subject: The Automatic End-user Enrollment Process [print this page] This test prepares you for various job roles, which include: systems engineer, systems administrator, network administrator, information systems administrator, technical support engineers, systems analysts, network analysts and technical consultants. If you would like to know more about the Windows Server 2003 Planning Network Infrastructure 70-293 Examplease visit the Microsoft website.
The test is appropriate for you if you are working or want to work in a typically complex computing environment of medium-to-large organizations. There are no specific prerequisites for this test IT Exams, although it is recommended that you should have at least one year of experience in implementing and administering network operating systems in network environments.
When automatic enrollment is available, certificates are automatically issued for intended users or computers. It is not necessary to make a manual request. The exact process when the certificate must be requested and what has to happen before it can be installed will depend on the type of certificate.
Automatic enrollment for computer certificates and Encrypting File System (EPS) certificates was introduced in Windows 2000. In Windows 2000, if automatic computer certificate enrollment is configured, a certificate is issued to and installed by a computer when it joins the domain. If a CA is configured to issue EPS certificates, a certificate is issued to and installed by a user's computer when the user first requests to encrypt a file. If no CA is present to issue an EFS certificate, and EPS is not disabled, a self-signed certificate is issued for the user.
Windows Server 2003 expands the use of automatic enrollment to users. However, for certificates to be automatically enrolled, custom MCSE Certification templates must be created and configured for automatic enrollment. The process of automatic enrollment will vary. For example, to complete the enrollment process, the certificate must be distributed to the users. In the case of certificates for smart cards, for certificates to be installed, the user must have a smart card reader/writer and must insert a new smart card into the reader at the proper time. Thus, the process cannot be completed until the user is prompted to insert a smart card (signifying that the process is ready) and then inserts the smart card. Remember, however, that the process of enrollment is automatic here. Enrollment is the request and the approval or denial. Distribution delivers the certificate, and installation installs it. It is the later part of the process that must be completed, in this case, by a manual operation.
