In a Group Policy object （GPO）， configure the autoenrollment settings
In a Group Policy object （GPO）， configure the Automatic Certificate Request Settings.
On the certificate template， assign the Read and Autoenroll permission to the Authenticated Users group.
On the certificate template， assign the Read， Enroll， and Autoenroll permission to the Domain Users group.
第1题：
You have an Active Directory domain that runs Windows Server 2008 R2. You need to implement a certification authority （CA） server that meets the following requirements： - Allows the certification authority to automatically issue certificates - Integrates with Active Directory Domain Services What should you do（）
第2题：
Your company has an Active Directory forest. You plan to install an Enterprise certification authority （CA） on a dedicated stand-alone server. When you attempt to add the Active Directory Certificate Services （AD CS） server role， you find that the Enterprise CA option is not available. You need to install the AD CS server role as an Enterprise CA. What should you do first（）
第3题：
Your network contains a server named Server1. The Active Directory Rights Management Services （AD RMS） server role is installed on Server1. An administrator changes the password of the user account that is used by AD RMS. You need to update AD RMS to use the new password. Which console should you use（）
第4题：
You are designing a plan to migrate an existing application to Windows Azure. The application must use the existing Active Directory Domain Services （AD DS） domain. You need to recommend an approach for joining Windows Azure virtual machines to the domain. What should you recommend？（）
第5题：
You have Active Directory Certificate Services （AD CS） deployed. You create a custom certificate template. You need to ensure that all of the users in the domain automatically enroll for a certificate based on the custom certificate template. Which two actions should you perform（）
第6题：
Your company has an Active Directory domain. You plan to install the Active Directory Certificate Services （AD CS） server role on a member server that runs Windows Server 2008 R2. You need to ensure that members of the Account Operators group are able to issue smartcard credentials. They should not be able to revoke certificates. Which three actions should you perform（）
第7题：
Your company has an Active Directory forest. You plan to install an Enterprise certification authority （CA） on a dedicated stand-alone server. When you attempt to add the Active Directory Certificate Services （AD CS） server role， you find that the Enterprise CA option is not available. You need to install the AD CS server role as an Enterprise CA. What should you do first（）
第8题：
You are designing a plan to migrate an existing application to Windows Azure. The application must use the existing Active Directory Domain Services （AD DS） domain. You need to recommend an approach for joining Windows Azure virtual machines to the domain. What should you recommend？（）
第9题：
Your network contains two standalone servers named Server1 and Server2 that have Active Directory Lightweight Directory Services （AD LDS） installed.Server1 has an AD LDS instance. You need to ensure that you can replicate the instance from Server1 to Server2. What should you do on both servers（）
第10题：
You deploy a new Active Directory Federation Services （AD FS） federation server. You request new certificates for the AD FS federation server. You need to ensure that the AD FS federation server can use the new certificates. To which certificate store should you import the certificates（）