Certificate autoenrollment can be used to automatically get user and machine certificates from domain-joined machines when a machine or user logs on to the domain. It can’t be used for automatically enrolling for certificates from standalone machines.
For more information, check out http://windowsitpro.com/security/setting-certificate-autoenrollment-feature-windows-public-key-infrastructure
For mFoFor
