Drawing a Certificate by bypassing a OU

First thing is to Open GPEDIT.MSC

Open up Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment. Edit the policy named “Access this computer from the network” 

  

Click “Add User or Group” and add the group “Everyone” 

In the MMC , right click Personal > All Tasks > Request New Certificate.

 

Click Next.

Click Next.

 

Check the box next to “PKI Device” and click Enroll.

Click Finish