Whether it is possible to view all certificates at users in the domain?

Question

System administration

Is it possible to control all certificates in the domain?
On the one hand, to ensure confidence in the right centers. On the other hand, so that there are no unnecessary ones.

Answer 1

certmgr.msc
for output to the log, in one script or at the time of launch, use:
and in the data collection script:

Get-Date
Get-WmiObject -Class Win32_ComputerSystem -ComputerName .
dir cert:\currentuser\my
"-------КОНЕЦ---------"

# due to the fact that this is written without Write-Host - then all this will simply be output to a file, in its pure form. if there is too much information - no one canceled the filters :)