Testing the automatic enrollment

To test, proceed as follows:

1. Start a Windows 11 client of the Active Directory domain and log on with a user.

2. To make sure that the newly set GPO definitely takes effect, you can run a Group Policy Refresh in a DOS box.

3. gpupdate /force: This is to verify that the GPO has been applied

4. gpresult /r

   

   

5. The certificate can be found in certmgr.msc under Personal - Certificates.