Users must never become accustomed to accepting browser certificate warnings as they appear. For this reason, the certificates must be configured correctly on computers from the very beginning.
Explain to users that they must never, under any circumstances, accept a certificate warning, especially when connecting externally (e.g. web groupware). Instead, an IT manager or an Intra2net specialist retailer should be contacted.