This script installs and configures the Network Device Enrollment Service (NDES) role on Windows Server. It also configures the server to use a specific TLS certificate and certificate template for NDES. In addition, this script performs several post-installation tasks to ensure the NDES service is properly configured, optimized, and secured.

This script performs the following tasks: - Disables Internet Explorer enhanced security configuration, which is required for the Intune Certificate Connector installer to run successfully. - Checks if the specified PKCS service account is a member of the local administrators group and adds it if necessary. - Updates the registry to enable the SID... More info

DirectAccess requires a public TLS certificate for the IP-HTTPS IPv6 transition technology. When using the CertKit.io agent to manage this certificate, the certkit-agent service must run in the context of a service account (gMSA or standard domain account) with delegated permissions on the DirectAccess Client Settings and DirectAccess Server Settin... More info