Re-enroll all certificate holders

To re-enroll all certificate holders

Open Certificate Templates.
Right-click the template that you want to use and then click Reenroll All Certificate Holders.

Notes

To perform this procedure, you must be a member of the Enterprise Admins group or the root domain's Domain Admins group in Active Directory. As a security best practice, consider using Run as to perform this procedure.
To open Certificate Templates, click Start, click Run, type certtmpl.msc, and then press Enter.
This procedure is used when a critical change is made to the certificate template and you want all subjects that hold a certificate that is based on this template to re-enroll as quickly as possible. The next time the subject verifies the version of the certificate against the version of the template on the certification authority, the subject will re-enroll.