We are rolling out EAP-TLS wireless certificate based authentication that will need to support contractors with domain user accounts on our domain, but not using laptops from our domain (so we can't deploy to them with group policy).
We planned to have these users install user certificates on their laptops and were going to set up the ADCS Web Enrollment page, for self-service enrollment, but the page looks too clunky and confusing to have every user try to do this themselves.
How can we configure this so IT staff request these certificates on behalf of the users so the users don't need to deal with the web enrollment page?
Is there a way to do this in bulk from a CSV file of user names so we can get the initial mass deployment of new certificates done quickly?