Hi,
I have a Server 2012 R2 DC and a Server 2012 Enterprise CA.
When I set up an autoenrollment policy (Certificate Services Client - Auto-Enrollment), publish the computer certificate template and grant "Domain Computers" "read" and "autoenroll" rights - everything is working fine!
When I grant these rights to a custom Computer Group that contains certain Computer accounts - these Clients do not receive the certificates.
Any help appreciated!