Set oShell = WScript.CreateObject("WScript.Shell") 
' Get CA cert from AD
oShell.Run "cmd /C gpupdate /force", 0, True
' Show Root store to user
oShell.Run "cmd /C certutil -viewstore Root", 0, True