there is both a KB and a technet article. even if you have never done anything with it, the AD trees have to be removed if it was an enterprise CA (which will happen naturally if you remove the CA cleanly).
________________________________________ From: asbz...@gmail.com [asbz...@gmail.com] Sent: Tuesday, November 03, 2009 5:30 PM To: NT System Admin Issues Subject: Re: Certificate Authority IIRC, there is a document on decommissioning a Cert Server. If you've never done *anything* with it, there may be no issues. ------Original Message------ From: Jeremy Anderson To: NT Issues ReplyTo: NT Issues Subject: Certificate Authority Sent: Nov 3, 2009 4:53 PM I need to retire a 2003 DC that is a certificate authority. If it is not being used for anything, can I just uninstall the CA then demote the server? Anything I sould be aware of? TIA. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~