Do I need Active Directory Certificate Services on my 2019 DC? Moved from a 2011 SBS (2008 R2 Platform) to a 2019 Server. There is no Exchange or Web hosting on the new server. No Remote Services or apps running on server. It’s just a file server / DC. I backed up the AD Certificates and reg entry on old 2011 SBS and now I want to demote it. Any reason I should reinstall on 2019?