We use WSUS on site and up until current investigations with a fault, we used WSUS to deploy root certs to our windows 7 32 and 64 bit machines. Last one that we can recall was around Nov 2014 Update for Root Certificates for Windows 7, this like the previous updates of the root certs were deployed to the windows clients. Recently a lot of new PCs that get build and deployed have website certificate errors. From looking on our WSUS server not one of our previously approved root certs exists anymore! which means any new PC hasn't been getting this update from our WSUS server. Last remember checking it around the end of 2014 early 2015. From looking online I have been unable to find a way to get these updates to re-appear its like Microsoft have removed them, even settings up a new dummy WSUS server and downloading all updates doesn't find these updates.
Wondered if anyone can shed a light on this? Has Microsoft removed these permantly ? What do others now do?