CLICK THE CERTIFICATE MANAGERS RESTRICTIONSTAB. THE DEFAULT SETTING...

7. Click the Certificate Managers Restrictionstab. The default settinghere tells the CA to not restrict certificate managers. As an adminis-trator, you can designate certificate managers by giving them the Issueand Manage Certificatespermission. By changing the default, you canspecifically restrict the users, groups, and computers over which a cer-tificate manager has control.