Primary Certificate automatic enrollment in Active Directory

CURRENT CONFIGURATION: Windows Domain on Windows Server 2003 SP2

OBJECTIVE: Primary Certificate automatic enrolment (distribution) and keeping in Active Directory

ISSUE: DIMS User's Group Policy does not work on non domain controller server.

SOLUTION:
Follow the instruction
Request files KRdeploy.cmd and KRdeploy.js from Microsoft Support.
Use DIMS.adm from Microsoft page instead of file DIMS.adm, sent by support.