> Is there anyway to automate this procedure in our LAN environment > other than scenario #2 below? >
Yes. I have posted this to the list a few days ago. With 2K3 Enterprise certificates are requested, created (even renewed) and distributed via the Policy: http://www.isaserver.org/img/upl/vpnkitbeta2/autoenroll.htm That article has a good guide for machine autoenrollment. Other guides tend to concentrate on user autoenrollment. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

