# Neue GPO erstellen
New-GPO -Name "PKI-Autoenrollment" | New-GPLink -Target "DC=speakstone,DC=de"

# Computer Autoenrollment aktivieren
Set-GPRegistryValue -Name "PKI-Autoenrollment" `
  -Key "HKLM\SOFTWARE\Policies\Microsoft\Cryptography\AutoEnrollment" `
  -ValueName "AEPolicy" -Type DWord -Value 7

# User Autoenrollment aktivieren
Set-GPRegistryValue -Name "PKI-Autoenrollment" `
  -Key "HKCU\SOFTWARE\Policies\Microsoft\Cryptography\AutoEnrollment" `
  -ValueName "AEPolicy" -Type DWord -Value 7