I have a large number of separate Active Directory domains (~150) consisting of 2 server clusters that I need to setup for smart card login. To do this I will have to request ~300 domain controller certificates manually due to my environment. Needless to say that is a huge amount of manual effort and I am looking to script it.
To request a domain controller certificate you need three pieces of information: the certificate request, domain name and GUID. I can generate all of that information automatically but I cannot figure out how to change each domain controller's GUID to match the cert short of a direct ldap change. Does anyone know if that would work or would I break the domain?