This problem might be related to the following problem I have explained in this thread: http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/da890a64-736e-4bae-b9d8-427a5cf3a0ed
For the clients that autoenroll works for, CA seems to enroll new certificates very often. Sometimes several times a day. If i filter for one example I have 27 Issued certificates since May last year.
You can imagine how many Issued certificates this makes if we have, let's say 1000 client computers. Today we have 281 578 Issued certificates in the list.
On the clients themselves there is only one certificate visible, so I guess they are getting renewed?
What else can I look for to manage this in a better way?