Deploy certificate using a Windows Group Policy Object

- On the DC, go to Start > All Programs > Administrative Tools > Active Directory Users
and Computers.

- Right click on the domain name and select Properties.

- Select the Group Policy tab.

- Highlight Default Domain Policy and click the Edit button.

-
- Navigate to Computer Configuration > Windows Settings > Security Settings > Public
Key Policies > Trusted Root Certification Authorities.

- With the mouse in the right hand pane, right-click and select Import.

- Click Next.

- Browse to the folder and open the <file.cer> file created earlier.

- Click Next.

- Note that it defaults to importing the certificate into Trusted Root Certification Authorities.

- Click Next and Finish.

- Click OK at the successful import message.

- Exit from Group Policy Object Editor.

- Click OK.

- Exit from Active Directory Users and Computers.