How to automatically install S/MIME certs on PCs?

[Alan]

Hello,

My company is about to roll-out a few hundred new PCs with Outlook
2003. One of our requirements on the new PCs is to use S/MIME to sign -
but not encrypt - messages.

We have a W2K3 CA so generating user certificates is relatively easy...
but what's the best way to install and configure the certs on each PC?
The mail profiles will be automatically generated on logon using the
CIW but I can't see how to add the certs automatically.

Thanks in advance for any pointers.

- Alan.

 

[Brian Tillman]

We have a W2K3 CA so generating user certificates is relatively
easy... but what's the best way to install and configure the certs on
each PC? The mail profiles will be automatically generated on logon
using the CIW but I can't see how to add the certs automatically.

Signing Certs aren't stored in Outlook. They're stored in the Windows
Crypto store that you can see either in IE's Tools>Internet
Options>Content>Certificates or from the Management Console certmgr.msc