I am Domain Admin of a company. We implement Active Directory Certificate Services in our company for email signature and encryption. Because we have more than 1000 users in our company, we want to enable auto-enrollment on User certificate template but we want to prevent users to have multiple certificates. Therefore we are seeking for a method to restrict them enroll certificate manually.
When we uncheck the enroll permission in the security tab of user template properties the auto-enrollment feature won't work. Is there any solution for my issue?