I want to Turn off Automatic Root Certificates Update, which I feel can be done using the group Policy. But I am not sure what Repercussion it going to have. From the description I realise that if we disbale root certificate and
"If the user is presented with a certificate issued by a root certification authoritythat is not directly trusted, and the Update Root Certificates component is not installed on the user’s computer, the user will be prevented from completing the action that required authentication"
from the above statement I want to know how it is determined if the certificate issue is trusted or not even before checking with the Microsoft website as thats been turned of.
In short, I need to know if the Automatic root certificate is turned off and of there is any applicates certificate on what basis it is determine whether it is trusted or not trusted..what local policy is checked and how?