MS CA 2012 - NDES and user Web enrollment

Hello!

I'm install standalone RootCA and enterprise SubCA. On SubCA I install Certificate Authority, NDES and CA Web Enrollment roles.

I configure templates and permissions on SubCA.

List of available templates in Web enrollment page(https://subca/certsrv) and in MMC snap-in(when I request certificate) are differ. User are the same. Why teplates differ for the same user?

In Web enrollment available only 3 templates used by NDES by default - CEP Encryption, IPSec(Offline request), Exchange Enrollment Agent.

Can I use another templates throw Web enrollment page? Or this is NDES limitation?