Hello there, We have a MS PKI based Infrastructure which is used for issuing machine certs to workstations and the cert gets validated while users do a VPN to connect to the company network. The certificate services are hosted on a Windows server 2003 platform. Some of the users are remote and seldom work from company premises. These certs are issued via Group Policy; when a machine is joined to the AD domain, it automatically gets the cert. Is there a way to request for a machine using the web enrollment page (http://SERVERHOSTNAME/certsrv/certrqad.asp)? We want to be able to request for a machine cert by (modifying the Workstation Authentication Certificate template) using the web enrollment page and send it to the users who are remote with an expired cert, so they can install the updated cert and do a VPN. Thanks for your help in advance, V

Hello, the better forum for your question is http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.