I have a client that is seeing the same exact issue. There are two CA's a Root and aSub CA. If we manually request a certificate via the Certificate Snap-in weare able to login fine. Yet the Machine certificate issued via group policy will not wor...