JSI Tip 5739. How do I configure Windows 2000 to allow a child domain user to get certificates from a parent domain and publish them in Active Directory?

Microsoft Knowledge Base Article 281271 contains the following Description:

In the following scenario, if a user from the same domain as a Root Certification Authority (CA) requests a certificate, the issued certificate is published in Active Directory. However, if the user is from a child domain, this process is not...