How to troubleshoot Profile Manager AD Certificate Payload

I am running Server 3.2.2 on a Mavericks system and running into an issue with Profile Manager.

We followed the documentation from Apple that is listed here:

How to request a certificate from a Microsoft Certificate Authority using DCE/RPC and the Active Directory Certificate p…

We have it working, at least some of the time. Enrollment on any of our MAC laptops is working as intended. We then have a separate Device Group within Profile Manager that has the AD Cert Payload configured. After enrollment we add the MAC to the group and then update the info within profile manager. After updating the device information the AD Certificate payload settings are pushed to the device. On some of the MACs it works fine and a machine specific AD Cert is delivered to the device. On others we are getting the message that payload settings push has failed.

I have been searching for days and am unable to find any documentation on where the logs would be located or how to go about troubleshooting the issue. We have successful pushes on both 10.9x and 10.8x devices. We also have failures on 10.9x and 10.8x devices. There does not seem to be any rhyme or reason to this.

Any help would be GREATLY appreciated. Thank you!!