應該不至於要在新增移除程式裡面去移除 Update Root Certificates 這個元件,
只要透過GPO去禁止 Automatic Root Certificate Update 即可
底下是如何在GPO裡關閉 Automatic Root Certificate Update 的說明
Click Run > type gpedit.msc > Computer Configuration >
Administrative Templates > System > Internet Communication Management
Internet Communication Settings
Under this setting Enable the Turn Off Automatic Root Certificates
Update.
將這個規則派出後, 隔天再觀察你的 client 還會不會有 crypt32的錯誤~