To configure a certificate template permissions unit to define the decal on the security tab for each
cert template.
The permissions assigned to a certificate template will define which users or groups can read or modify
certificate template and who can roll or use auto enrolment for the certificate.
Based on that certificate template you can assign the following permissions to certificate template
you can a full control.
The full control permission allows a security principal to modify all attributes of a certificate template
which includes permissions for the certificate template itself.
It also includes permission to modify the security descriptor of the certificate template their next
permission is read.
Permission the route permission allows a user or computer to view the certificate template when in a
four certificates.
This certificate server requires a read permission to find certificate templates in a deed is and other
permission is the right permission.
The right permission allows a user or computer to modify the attributes of a certificate template.
In Road permission allows a user to or computer to enroll for a certificate based on the computer or
template.
However to enroll for a certificate you also must have read permissions for the certificate template
and the last permission is auto enroll the auto enroll permission allows the user or computer to retrieve
it certificate through the auto enrolment process.
However the author and rule permission also requires the user or computer to have both read and enrolled
permissions for a certificate template.
As best practice you should assign certificate template permissions to global or universal groups only.
This is because the certificate template objects are stored in the configuration name and context in
aid it is a way to sign and certificate template permissions to individual users or computer accounts
as the as a best practice.
Keep the read permission or a key allocated to the authenticator to users group route permissions enable
all users and computers to use a certificate templates in eight years.
This permission assignment also enables the C which runs under the system context over computer account
to view the certificate templates.
When assigning certificates this permission however does not grant in rural rights which helps ensure
the safety of this configuration.
Next up will be talking about configuring certificate templates Saturns.
I'll see you there.