Need sanity check: steps to setting up certificate enrollment for dot1x/PEAP/Active Directory

[Ivan Kalik]

> Is there anyway to automate this procedure in our LAN environment
> other than scenario #2 below?
>

Yes. I have posted this to the list a few days ago. With 2K3 Enterprise
certificates are requested, created (even renewed) and distributed via the
Policy:

http://www.isaserver.org/img/upl/vpnkitbeta2/autoenroll.htm

That article has a good guide for machine autoenrollment. Other guides
tend to concentrate on user autoenrollment.

Ivan Kalik
Kalik Informatika ISP