Configure Active Directory Certificate Services (ADCS) Computer Templates
Building on the previous video about user certificate templates, this follow-up tutorial dives into configuring computer certificate templates in Active Directory Certificate Services (AD CS). You’ll learn how to set up auto-enrollment via GPO, manually request certificates, and understand key differences with domain controllers. We also touch on the limitations of Windows Admin Center and preview what’s next: SSL certificates with Subject Alternative Names.
Applies to:
✅ Windows Server 2025, ✅ Windows Server 2022, ✅ Windows Server 2019, ✅ Windows Server 2016, ✅ Windows Server 2012R2, ✅ Windows Server 2012
Chapters:
0:00 Introduction
0:26 Create New Auto-Enroll Computer Certificate Template
1:57 Computer Auto-Enroll GPO
3:06 Computer Automatic Enrollment
3:48 Computer Manual Enrollment
4:43 Next Steps – Web Server SSL Certificates
5:06 Windows Admin Center to Manage Certificates
5:59 Thank you for watching!
Glossary:
AAD = Azure Active Directory
ADCS = Active Directory Certificate Services
ADDS = Active Directory Domain Services
AIA = Authority Information Access
CA = Certificate Authority
CDP = CRL Distribution Point
CRL = Certificate Revocation List
CSR = Certificate Signing Request
EFS = Encrypting File System
GPO = Group Policy Object
MMC = Microsoft Management Console
OCSP = Online Certificate Status Protocol
PKI = Public Key Infrastructure
RSA = Rivest–Shamir–Adleman (a public-key encryption algorithm)
SHA = Secure Hash Algorithm
UPN = User Principal Name
SAN = Subject Alternative Name
PAW = Privileged Access Workstation
RSAT = Remote Server Administration Tools
PSSession = PowerShell Remoting Session
CMDLET = Lightweight PowerShell command
NTFS = New Technology File System (used for EFS encryption)
GitHub (commands):
https://github.com/DariensTips
Commands:
Dir Cert:\LocalMachine\my\
Get-Item Cert:\LocalMachine\my\[thumbprint] |Select-Object *
Links:
https://learn.microsoft.com/en-us/pow...
https://learn.microsoft.com/en-us/pre...
https://learn.microsoft.com/en-us/tra...
https://learn.microsoft.com/en-us/tra...
https://learn.microsoft.com/en-us/tro...
https://learn.microsoft.com/en-us/win...
https://learn.microsoft.com/en-us/win...
https://learn.microsoft.com/en-us/win...
https://learn.microsoft.com/en-us/win...
https://learn.microsoft.com/en-us/pow...
https://learn.microsoft.com/en-us/pow...
https://learn.microsoft.com/en-us/vis...
https://learn.microsoft.com/en-us/vis...
https://learn.microsoft.com/en-us/pow...
Hashtags:
#ADCS #WindowsServer #CertificateServices #ActiveDirectory #PKI
#ADCS #WindowsServer2025 #CertificateServices #ActiveDirectory #PowerShell #GPO #DigitalSigning #EnterpriseIT #ITAdmin