7. Select "Group Policy" tab and tick "default Domain Policy" click on "Properties".
8. Select Computer configuration > Security Setting > Public Key Policies
9. Right Click "Automatic Certificate Request Setting", select "New" then click on "Automatic
Certificate Request".