Under the Security tab, set the following options.

Option

Value

Groups or usernames

Select the group that will use the new certificate template. For example, select the Domain Users group to use a copy of the User certificate template. If the group is not listed, click Add to add the group to the list.

Permissions for Authenticated Users

Set the following Allow permissions for the selected group: Read, Enroll, Autoenroll.