Your network contains a server named Server1 that runs Windows Server 2008 R2 Standard. Server1 has the
Active Directory Certificate Services (AD CS) role installed.
You configure a certificate template named Template1 for autoenrollment. You discover that certificates are not
being issued to any client computers. The event logs on the client computers do not contain any autoenrollment
errors.
You need to ensure that all of the client computersautomatically receive certificates based on Template1.
What should you do?

A.
Modify the Default Domain Policy Group Policy object (GPO).

B.
Modify the Default Domain Controllers Policy Group Policy object (GPO).

C.
Upgrade Server1 to Windows Server 2008 R2 Enterprise.

D.
Restart Certificate Services on Server1.

Explanation:
Reference:
http://technet.microsoft.com/en-us/library/cc731522.aspx
Configure Certificate Autoenrollment
Many certificates can be distributed without the client even being aware that enrollment is taking place. These
can include most types of certificates issued to computers and services, as well as many certificates issued to
users.
To automatically enroll clients for certificates ina domain environment, you must:
Configure a certificate template with Autoenroll permissions.
Configure an autoenrollment policy for the domain.
To configure autoenrollment Group Policy for a domain
1. On a domain controller running Windows Server 2008 R2 or Windows Server 2008, click Start, point to
Administrative Tools, and then click Group Policy Management.
2. In the console tree, double-click Group Policy Objects in the forest and domain containing the Default
Domain Policy Group Policy object (GPO)that you want to edit.
3. (…)