I have a unique situation that is going to take a little explanation. This maybe more of a question for the AD Group Policy side, but the root cause is CM, so I thought I would start here. - We went to turn on our virtual Root CA server to do our annual cert renewal and discovered that someone had deleted it. I know, we should have had a hard copy and our backups are only held for X days and apparently it had been removed greater than X days. Trust me -- this will never happen again. - So, it was going to take us a couple days to plan this rebuild and since we were already in Native Mode on SCCM, we decided to switch back to Mixed Mode until the new PKI environment was in place. - We built out the new PKI environment and replaced all the workstation machine certificates with out a problem. - We replaced all the SCCM certificates and pointed CM to the new Root certificates. - We then switched Native Mode back on. - A couple days later we discovered that all functions of the SCCM client were working except Advertisements. The root cause to this issue is the Root CA Hash Code registry value was the old value. One solution to this is to uninstall / re-install the SCCM client. A better solution is to simply replace the registry value with the new one and restart the SMS Agent Host service. If we had known about this piece before we switched back to Native Mode, we could have deployed it through CM, but..... - So, we have scripted this in VB. The problem is, how do we get this to our entire environment? I would love to deploy this using Group Policy Software Install, but it has to be an MSI. We can convert the VBS to an EXE, but have not had any luck converting to an MSI. We want to avoid a logon script or similar types of deployment as remote people and people who lock their computer will not get this in a timely manor. - Any ideas on how we can get this done? Thanks in advance.