To avoid service disruption what is best method to get new certs auto enrolled to all workstations and computers ? want a method ideally without revoking the old certificates first until new certs autoenrolled.
Would selecting Reenroll All Certificate Holders on the relevant template do the job ? or would that not issue a brand new cert ?