I've implemented 2-tier CA Hierarechy after followed the link bellow , some certificate are issuing automatically while I have not publish any Group policy to issue cert in the domain automatically.howevere users didn't request to give cert.
as suggested in this link I ran this command:certutil –dspublish –f rootca.crt RootCA
http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/7d0893cd-a2c2-46cf-ae11-0e637dbcfaf2
does it make problem?why issuer is issuing Basic EFS Cert automatically to domain users?