How to get S/MIME certificate from Windows CA (Standalon or Enterprise)

Hi

I need s/mime certificate for email sign/encryption in my organization, mu question is

1- how to get S/MIME certificate from our Microsoft CA?

2- how to we create CSR file for this scenario?

Thanks