To clarify, it appears that to satisfy this item, you want to check:Renew expired certificates, update pending certificates, and remove revoked certificatesUpdate certificates that use certificate templatesand uncheck:Expiration notificationAfter setting the policy thusly, and running a gpupdate.exe, I was able to get the BPA to pass on this item.
↧