In which scenario CES/CEP are preferred over Certificate Request Wizard (or alternatives) for requesting certificates when in Intranet with single forest?
I have read article http://social.technet.microsoft.com/wiki/contents/articles/7734.certificate-enrollment-web-services-in-active-directory-certificate-services.aspx#Intranet_with_a_Single_Forest.
In scenario when non domain joined users use perimeter CES for certificate renewal (http://social.technet.microsoft.com/wiki/contents/articles/7734.certificate-enrollment-web-services-in-active-directory-certificate-services.aspx#Renewal_Only_Mode) is it correct to request original certificate using other way then internal CES/CEP?