You have an enterprise subordinate certification authority (CA).
You have a custom certificate templatethat has a key length of 1,024 bits.
The templateis enabledfor autoenrollment.
You increase thetemplate key length to 2,048 bits.
You need to ensure that all current certificate holdersautomatically enroll for a certificate that uses the
new template.
Which console should you use?

A.
Active Directory Administrative Center

B.
Certification Authority

C.
Certificate Templates

D.
Group Policy Management

Explanation:
Practically the same question as K/Q23.
Reference:
http://technet.microsoft.com/en-us/library/cc771246.aspx
Re-Enroll All Certificate Holders
This procedure is used when a critical change is made to the certificate template and you want all subjects that
hold a certificate that is based on this template to re-enroll as quickly as possible. The next time the subject
verifies the version of the certificate against theversion of the template on the certification authority (CA), the
subject will re-enroll.
Membership in Domain Admins or Enterprise Admins, or equivalent, is the minimum required to complete this
procedure. For more information, see Implement Role-Based Administration.
To re-enroll all certificate holders
1. Open the Certificate Templates snap-in.
2. Right-click the template that you want to use, and then click Reenroll All Certificate Holders.