Install-PkcsServer

1.0

This script performs the following tasks:

- Disables Internet Explorer enhanced security configuration, which is required for the Intune Certificate Connector installer to run successfully.
- Checks if the specified PKCS service account is a member of the local administrators group and adds it if necessary.
- Updates the registry to enable the SID security extension
This script performs the following tasks:

- Disables Internet Explorer enhanced security configuration, which is required for the Intune Certificate Connector installer to run successfully.
- Checks if the specified PKCS service account is a member of the local administrators group and adds it if necessary.
- Updates the registry to enable the SID security extension on PKCS issued certificates, which is required for proper certificate management in Intune.
- Grants the "Log on as a service" right to the PKCS service account, which is required for the certificate connector service to function properly.

Show more

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Script -Name Install-PkcsServer

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

Copyright (C) 2026 Richard M. Hicks Consulting, Inc. All Rights Reserved.

Package Details

Author(s)

  • Richard Hicks

Tags

PKCS Intune Certificate PKI x509

Functions

Grant-LogOnAsService

Dependencies

This script has no dependencies.

FileList

Version History

Version Downloads Last updated
1.0 (current version) 5 3/6/2026