We have a problem with permissions in security tab.
We have several branch offices with single AD Domain.
Every branch has a Certification Authority. AD Domain contains an OU for each branch.
Question:
Is it possible to allow users of a branch to request certificate of only that branch's CA with "Certificates" snap-in?
Creating a AD user group for every branch office is not a valid solution.