When creating user accounts in the options tab there is a checkbox labelled “Public key infrastructure account”. What is this for? The manual says accounts created with the checkbox checked get the (additional?) objectClass pkiUser. But what’s its purpose?
Maybe this article is interesting for you: Cool Solution - Creation and management of user and Windows certificates