Start menu>run>mmc.exe>ok
File>Add/Remove Snap in>Add>Certificate Authority
Right click on certificate templates>Manage
right Click Computer>Duplicate Template>Type “Machine Cert” on Name
Right Click on Machine Cert>Properties
Click on on Security Tab>Add domain group>Select added domain group>Check Read and Auto Enrol
All done.
Posted by Raihan Al-Beruni 
