Screen capture shows the "Security" tab portion of the "NDESCertTemplate Properties" form. The "Authenticated Users" group name is selected, and in the "Permissions for Authenticated Users" section, "Read, Write, Enroll, and Autoenroll" are marked as Allow.