YouhaveaWindowsServer2008R2EnterpriseRootcertificationauthority(CA).Youneedtograntmemberso
A.EnabletheRestrictEnrollmentAgentsoptionontheCA.
B.EnabletheRestrictCertificateManagersoptionontheCA.
C.AddtheBasicEFScertificatetemplatefortheAccountOperatorsgroup.
D.GranttheAccountOperatorsgrouptheManageCApermissionontheCA.
E.RemoveallunnecessarycertificatetemplatesthatareassignedtotheAccountOperatorsgroup.