I have recently set up Windows Certificate Services and have user certificates being autoenrolled.
Now, I would like to have those certificates automatically populated to the GAL (rather than the individual having to sign an e-mail or self-publish the certificates to the GAL).
A couple of other points:
1) The Certificate Server root and issuing CAs are seperate from, but in the same AD Domain as the Exchange servers.
2) Certificate Services is running on a series of Windows 2008 servers (don't know if that makes a difference)