Improve the support for cloning Active Directory Certificate Services (AD CS). Clone AD CS Certificate Enrollment Web Service, Certificate Enrollment Web Policy Service, Network Device Enrollment Service, and the Certificate Online Responder. These are all additional roles that can be installed alongside AD CS on Windows Server 2012 or later.

Improve the detection of Symantec Endpoint Protection 12.1.x to avoid spurious anti-tamper alert messages.