Windows user requirements

Installing the default set of certificate templates requires logging in to the root domain of the forest as a user who belongs to one of the following groups.

• Domain Admins
• Enterprise Admins