[Bug] False Negative detection of ADCS Web Enrolment when HTTP 200 is returned instead of 401

[SoftAndoWetto]

🔢 Certipy Version

5.1.0

🖥️ Operating System

Kali Linux 2026.1

📥 Command Used

certipy req \
    -u '<USERNAME>@<DOMAIN>' -p '<PASSWORD>' \
    -dc-ip '<DC_IP>' -target '<CA_HOSTNAME>' \
    -ca '<CA_NAME>' -template '<TEMPLATE_NAME>' \
    -upn '<TARGET_UPN>' -sid '<TARGET_SID>'

🧯 Error Message / Unexpected Output

Web Enrollment
 HTTP
  Enabled     : False

🔍 Relevant certipy find Output (abbreviated and redacted)

✅ Expected Behavior

In the environment I ran the command, accessing /certsrv/ via a standard HTTP GET request returns HTTP 200 instead of the expected 401 Unauthorised even though web enrolment is enabled, Authentication is required, the endpoint is functional and usable.
/certsrv/ returns 200 both in the browser and terminal however http://. returns 401

📎 Additional Context

No response