In Windows XP I can do the following actions via the UI:
Launch certmgr.msc. From then, select a certificate under Personal -> Certificates, click on properties and select "Disable (or enable) for all purposes."
How do I do the same from the command line? Probably via the registry, but without having to click through those interfaces.