|
Posted by Christian on March 3, 2008, 10:43 pm
Please log in for more thread options
(It was recommend that I post this questions to this group. It was
originally posted in the AD group.)
We have three DC's, all running Windows Server 2003 w/SP2. DC1 is unstable,
and needs to be demoted before there is a serious hardware failure. DC2 and
DC3 have been brought online, and all of the FSMO roles have been moved to
them. The one remaining issue is that DC1 issued the Domain Controller
certs to DC2 and DC3. No other certs in our environment where created by
DC1, just the Domain Controller certs for DC2 and DC3. What needs to be
done in order to allow the demotion of DC1 out of AD without affecting the
certs? This server will be salvaged after the demotion.
Thank you,
-Christian
| 
XML Sitemap