Certificate Services automatically assigning certs.

[Adam Sands]

I recently installed MS certificate srvices, Enterprise
root and subordinate CA. The root is offline and the
subordinate is on line. The the subordinate came online I
noticed that it assigned server/client authentication
certs to all domain controllers and EFS cert to all users
that were utilizing the EFS.

This happened automatically, can anyone explain why? Is
this by design? How can I turn this off?

There are currently no GPOs in effect that would affect
PKI.

 

[Rick]

You are correct that the default behavor is to autoenroll.

Rick