This script installs and configures the Network Device Enrollment Service (NDES) role on Windows Server to support the Microsoft Intune Certificate Connector. It also configures the server to use a specific TLS certificate and enrollment certificate template for NDES. In addition, this script performs several post-installation tasks to ensure the ... More info

This script performs the following tasks: - Validates the specified PKCS service account by resolving it to a SID before any changes are made to the server. - Grants the "Log on as a service" right to the PKCS service account, which is required for the certificate connector service to function properly. - Checks if the specified PKCS service accou... More info

DirectAccess requires a public TLS certificate for the IP-HTTPS IPv6 transition technology. When using the CertKit.io agent to manage this certificate, the certkit-agent service must run in the context of a service account (gMSA or standard domain account) with delegated permissions on the DirectAccess Client Settings and DirectAccess Server Settin... More info