riversidekid

Can I use a hosted PKI service (Verisign or InCommon) for SCCM to manage my internal Windows and Mac machines as well as my external Windows, Mac and mobile phones and tablets? In a lab I had set up a Windows CA and pushed certificates to each Windows device via GPO and I know I could import a cert from an external service before creating the first cert, but we do not want to run a CA at all. It looks as though we may be able to get Extended Validation Certificates for our SCCM site server, SCCM web based server etc and push those out to the workstations and devices, but I cannot find where this is actually supported. I beleieve we may have to go with something like Verisign/Symantec Managed PKI Service. The quick question is "Can we use a hosted EV Cert?" If not, what would it take to provide certs to each Windows machine via GPO and each non Windows machine? Thank you in advance!

I created a folder for "Delayed" updates and moved Internet Explorer 9 to the sub folder. The ADR rules do not apply to the sub folders. This may not be the "right" answer, but it is working in my test environment.

Products: Do I need to create another ADR for Bing Bar, and one for Forefront Client Security... Each Microsoft Product with it's own ADR and it's own collection? I am tempted to find a way to schedule a daily rule to approve and download those updates that show as "Required."