In each domain of the Active Directory forest, repeat the following procedure to link the Group Policy Object created for the WSTEP certificate chain.

To link a Group Policy Object  with a domain

1. Log into the root Active Directory of the forest as an Active Directory administrator.
2. Select Start > Windows Administrative Tools > Group Policy Management to open the Group Policy Management dialog.
   
3. Right-click the domain name and select Link an existing GPO... to display the Select GPO dialog.
   
4. Select the Group Policy Object.
5. Click OK.