diff --git a/xCAT-server/share/xcat/netboot/windows/nextdestiny.ps1 b/xCAT-server/share/xcat/netboot/windows/nextdestiny.ps1
index e3d18dd97..423a95e16 100644
--- a/xCAT-server/share/xcat/netboot/windows/nextdestiny.ps1
+++ b/xCAT-server/share/xcat/netboot/windows/nextdestiny.ps1
@@ -1,4 +1,8 @@
 $command=@{'command'='nextdestiny'}
+if (!(Test-Path HKLM:\Software\Policies\Microsoft\SystemCertificates\AuthRoot)) {
+	mkdir HKLM:\Software\Policies\Microsoft\SystemCertificates\AuthRoot
+	Set-ItemProperty HKLM:\Software\Policies\Microsoft\SystemCertificates\AuthRoot DisableRootAutoUpdate 1
+}
 if (!(Test-Path HKCU:\Software\xCAT)) {
         mkdir HKCU:\Software\xCAT
 	$certstore = New-Object System.Security.Cryptography.X509Certificates.X509Store("My","CurrentUser")