Required Windows security permissions for the Certificate Enrollment Web Service (CES)
Assuming one implements Microsoft's Active Directory Administrative Tiering Model, or applies similar hardening measures to one's servers, this will impact the CES components.
