lyon-it
asked on
How do I decommission Domain Controller, uninstall Certificate Services
Hello All,
I've looked at a few posts regarding Decommissioning a DC, and to safely remove Certificate Services. It's not letting me decommission it because it's a Certificate Authority for our Domain.
The DC is currently on and I've disabled the Certificate Service. I don't really think we're using Certificate Services in our environment. Actually this DC had been turned off for a few days before this, and we recently turned it back on the decommission it. Nothing was effected.
Is there a way to test, or is there some setting somewhere we can check to see if we're actually using this service?
It doesn't look like turning the box off or disabling the service didn't effect anything.
Thanks,
John
I've looked at a few posts regarding Decommissioning a DC, and to safely remove Certificate Services. It's not letting me decommission it because it's a Certificate Authority for our Domain.
The DC is currently on and I've disabled the Certificate Service. I don't really think we're using Certificate Services in our environment. Actually this DC had been turned off for a few days before this, and we recently turned it back on the decommission it. Nothing was effected.
Is there a way to test, or is there some setting somewhere we can check to see if we're actually using this service?
It doesn't look like turning the box off or disabling the service didn't effect anything.
Thanks,
John
Last Comment
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
What is the certificate that is listed? What server is it issued to? The cert details would help.
The Certificate Snap-In (via the MMC) and the CA Console are the only places that I know of that list certification information.
The Certificate Snap-In (via the MMC) and the CA Console are the only places that I know of that list certification information.
ASKER
Hello,
I looked in the MMC and we have 3 certs listed, 2 are issued to the Domain Controller I want to uninstall the service from. One of those is still valid. The third one is not assigned to any particular server, and it's still valid.
I'm wondering if there is some way I can verify if we're utilyzing any of these certs. Since I've had the service off for several days without any problems, my thought is we're not using the service and I can safely uninstall it. I believe the service was set up a while ago, and we never really used it. We're just taking precautions.
Thanks
I looked in the MMC and we have 3 certs listed, 2 are issued to the Domain Controller I want to uninstall the service from. One of those is still valid. The third one is not assigned to any particular server, and it's still valid.
I'm wondering if there is some way I can verify if we're utilyzing any of these certs. Since I've had the service off for several days without any problems, my thought is we're not using the service and I can safely uninstall it. I believe the service was set up a while ago, and we never really used it. We're just taking precautions.
Thanks
ASKER
After looking at everything in our environment, it looks like your first comment is the way to go. I will close this question and award you the points.
Thanks
Thanks
Glad I could help.
Windows Server 2003
Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).
129K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
ASKER
There is one cert listed that I'm not sure about, which has some time before it expires.
Is there any place in AD where I can tell if these certificates are being used in any way?
John