<div>
Abbright,<br />
<br />
Thank you for your response. The tactic with ajusting the time how long certificates are valid is actually a good approach. But even if a certificate is not valid anymore it will still stay in the 'Issued Certificates' folder right?<br />
<br />
Thank you<br />
Marcus
</div>


<div>
I just double-checked on that. And the answer is 'yes' it stays in the same folder. Anyways thank you for you help.<br />

</div>


<div>
Thank you - there are some really good ideas in this answer how to approach this problem.
</div>


<div>
<div class="content wysiwyg-content">
Hello,<br />
<br />
We are currently deploying a Root Certificate Authority running on a Windows Server 2008. The CA will auto-enroll all laptops for machine certificates. And that actually leads to my question. We have currently 400 laptops in the company. There are permanently laptops which are out of lease and are be swapped with new ones. As the new machines come online to the network they receive a cert but is there a way how we can automate the removal\revoke of the certificates on the CA when machines are being removed from the network or does this process has to be manual?I assume we are not the only ones facing this issue. <br />
<br />
Thank you<br />
Mc2101
</div>
</div>


Hello,

We are currently deploying a Root Certificate Authority running on a Windows Server 2008. The CA will auto-enroll all laptops for machine certificates. And that actually leads to my question. We have currently 400 laptops in the company. There are permanently laptops which are out of lease and are be swapped with new ones. As the new machines come online to the network they receive a cert but is there a way how we can automate the removal\revoke of the certificates on the CA when machines are being removed from the network or does this process has to be manual?I assume we are not the only ones facing this issue. 

Thank you
Mc2101

Abbright,

Thank you for your response. The tactic with ajusting the time how long certificates are valid is actually a good approach. But even if a certificate is not valid anymore it will still stay in the &#39;Issued Certificates&#39; folder right?

Thank you
Marcus

I just double-checked on that. And the answer is &#39;yes&#39; it stays in the same folder. Anyways thank you for you help.


Thank you - there are some really good ideas in this answer how to approach this problem.

Automatic revocation of certificates

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

Windows Server 2008

IT Administration is the processes and best practices for programming and development, and incorporates methodologies for managing activities and projects. Common methodologies include waterfall, prototyping, iterative and incremental development, spiral development, rapid application development, extreme programming and various types of agile methodology. The life-cycle "model" is a more general term for a category of methodologies, and a software development "process" a more specific term to refer to a specific process chosen by a specific organization.

IT Administration

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.