enroll

Allow or deny an Active Directory group from enrolling certificates issued against a template.