This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then ...

This policy setting allows you to manage the clean up behavior of root certificates.  If you enable this policy setting then root certificate cleanup will occur according to the option selected. If you disable or do not configure this setting then root certificate clean up will occur on log off.