Hi,
I'm working on a windows 2012 domain, and I've applied the Server Authentication Certificate Template group policy to a 2012 server I'm working on (I applied the relevant GPO to the OU that the server is in). I set it (by oid) to use a certificate template that is configured on the CA. The template has Server and Client Auth in the Application Policy extension.
An RSOP on the target server reports that the GP setting has been applied.
The registry setting HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\TemplateCertificate hasn't appeared on that server though. The certificate isn't being enrolled (it doesn't appear in certlm.msc) and the self-signed certificate is still being presented when RDPing to the server.
What am I doing wrong?
Thanks.