After upgrading our Windows 10 1709 machines to 1803, I am no longer able to request a config manager cert or Wi-Fi computer certificate. I have also tested this with a Wipe and Load fresh copy of windows 10 1803 and joining it to our domain with the same results. As a user I can request a new certificate but as a computer I cannot. The MMC certificate add-in shows no templates available, all are access denied.
Update May 22, 2018 >> Microsoft has confirmed this is a bug!
Update June 12, 2018 >> As a workaround I found you can issue the command certutil -pulse to get a certificate issued.
Update September 5, 2018 >> Microsoft has released a new update that solves the problem. We hope!
https://support.microsoft.com/en-us/help/4346783/windows-10-update-kb4346783
Addresses an issue that causes computer certificate enrollment or renewal to fail with an “Access denied” error after installing the April 2018 update. This issue occurs when the registry process has a lower process ID (PID) than all other processes except SYSTEM.
