We use a Windows NPS server for our Wireless authentication. When it was first setup the NPS server was a domain controller but we later removed the DC role from it as that wasn’t necessary for its function. But we’ve found after doing that the certificate on the server that it gets from the forrest root doesn’t renew like the ones on the DCs. It won’t even let you renew it manually gives some sort of user unauthorized error. FOr now to get the Wireless working I just promoted it to a DC again. That updated the cert as part of that. Is there a way of getting the cert to update automatically on a non DC?