Is it possible to remove an Enterprise CA from a Windows 2003 R2 domain?

Giganews Newsgroups
Subject: Is it possible to remove an Enterprise CA from a Windows 2003 R2 domain?
Posted by:  Rob Gordon (Robert.Gordon@nospam.dslextreme.com)
Date: Sat, 19 Jul 2008

Once a server has been designated as an Enterprise CA within a Windows
2003 R2 domain, is there any way to back it out?  I am trying to clean
up some domain issues with a client's network, and it appears that
someone attempted to implement a PKI infrastructure, but they didn't do
a very clean job if it, so I want to try and remove the CA from the
domain and start over cleanly.  They also installed the cert server on a
DC, which I know isn't a best practice either.

Replies