Remove certificates using Powershell

[AGWHS]

Hello all,

 

I'm having an issue with SSL Certs installed on machines around the building. Here's the situation:

 

- Client machines aren't able to open Outlook: it's giving them a Proxy error when they try.

- On Group Policy, the latest SSL certificates are set to install on each machine (AllWorkstations group)

- Also on GP, the cert auto-enrollment is set up to renew and remove expired certificates

- Upon restarting an affected machine, the certs don't install

- I can install them manually by logging on as myself (administrator) and importing the certificates, which then fixes the issue.

 

I've found that the expired old certificates (with the same name as the new ones) are still installed on the affected machines, so my feeling is that Group Policy thinks they are already there so don't need 'reinstalling'.

 

So I have a couple of questions:

 

- Rather than going through every computer and removing the old ones, is there a Powershell command I can use to do so for me?

- Where would I need to open the Powershell? On the 'main server'? The email server? etc.?

 

Let me know if you need additional info, I've quite literally never used Powershell before so guidance is appreciated.