Decommission domain controller/Certificate Server

Posted on 2007-07-19
Last Modified: 2013-12-04
I am in an environment that has a Certificate Authority installed on a 2000 domain controller. I am trying to decommission all of the old 2000 domain controllers. Can I DCpromo the 2000 domain controller without affecting its certificate authority role?

I was told that this would be ok, but I am go trying to dcpromo the domain controller and it is telling me that the certificate services need to be uninstalled.
Question by:jobjj
    LVL 18

    Accepted Solution

    I have no idea who told you that this would be OK. But indeed as you have seen: you need to uninstall the certificate services before you can demote a DC. There is no other way.
    This means that you have to set up a new CA and hand out new certificates. Depending on what you use the certificates for this can be a trivial task or be very time consuming. It also depends on your PKI architecture. If this is a subordinate CA you can easily create a new one. If this is your root CA then you'll have to start from zero.

    LVL 1

    Expert Comment

    Accept PowerIT's answer and get cracking. There really is nothing more that can be said other than that.  Points to PowerIT!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
    The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now