MicrosoftSavannah_Greene Thank you for the quick response.
Yes, I am referring to NDES/ Windows SCEP implementation, the initial certificates are issued manually via NDES to Servers that are in a forest with no trust relationship with the CA\ NDES Servers, I was wondering if the renewals could be automated but your answer clarifies that it can't be automated without going through Intune or other MDM solution for renewals to work.
I was looking at CEP /CES but did not move forward with it due to Microsoft Security Advisory 974929 - Credential Relaying Attacks on integrated Windows Authentication.
I am not sure if that has changed or if I can combine NDES for the initial certificate issuance then use CEP /CES certificate based renewal for the renewals?
