New CA Enterprise - default Certificate Template - and default.

Ok, so I setup a (Offline) CA root etc.. Followed a set of directions for setting up a Enterprise CA on my domain. So I'm sitting here thinking okay, according to the instructions it shouldn't have kicked off any big changes. And as far as I can tell it hasn't. That being said, after digging into it I discovered that it loaded the default templates. So first question is what the hell has that done, and other then it saying it can distribute certs for all of those templates, (Which it seems to have distributed certs to all of my DC's and the subordinate CA)

I changed the setting that automatically issues certs to keep them at pending (hopefully to keep anything else from asking for certs and causing any issues)

So since it's a base install, and I'm hoping that other then it issued certs to the DC's (and from the policies I didn't see anything as using the certs)

Basically we need the CA for a wireless /radius setup at the moment, but I'm sure it'll expand to issuing certs to all desktops and encrypting communications. That being said should I install Microsoft NPS (radius) on the subordinate CA, or setup a separate server just for NPS, I'm expecting about 100 users for the radius eventually close to 500 users, but more then likely not more then 200 at a time for the next 5 to 10 years. It's vmware and I can increase resources for the vm as needed so I don't think it'd be an issue but I'll take any suggestions.