Adcs manage pki certificate templates outsidesys if you enable ca certificate manager approval give the computer or user accounts both enroll autoenroll permissions this allows for retrieval of the yelopaper Choice Image