You can configure a Windows Certification Authority certificate template to require CA certificate manager approval, as shown below. With this configuration autoenrollment is disabled and the CA Manager must approve the certificate request before the...