Click here to get back home

Is it possible to remove an Enterprise CA from a Windows 2003 R2 domain?
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Is it possible to remove an Enterprise CA from a Windows 2003 R2 domain? Rob Gordon 07-20-2008
Posted by Rob Gordon on July 20, 2008, 1:08 am
Please log in for more thread options
 Once a server has been designated as an Enterprise CA within a Windows
2003 R2 domain, is there any way to back it out? I am trying to clean
up some domain issues with a client's network, and it appears that
someone attempted to implement a PKI infrastructure, but they didn't do
a very clean job if it, so I want to try and remove the CA from the
domain and start over cleanly. They also installed the cert server on a
DC, which I know isn't a best practice either.

Posted by S. Pidgorny on July 20, 2008, 5:16 am
Please log in for more thread options
 http://support.microsoft.com/kb/889250

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

> Once a server has been designated as an Enterprise CA within a Windows
> 2003 R2 domain, is there any way to back it out? I am trying to clean up
> some domain issues with a client's network, and it appears that someone
> attempted to implement a PKI infrastructure, but they didn't do a very
> clean job if it, so I want to try and remove the CA from the domain and
> start over cleanly. They also installed the cert server on a DC, which I
> know isn't a best practice either.



Posted by Jorge de Almeida Pinto [MVP - on July 20, 2008, 6:18 pm
Please log in for more thread options
MS-KBQ555151_How to remove manually Enterprise Windows Certificate Authority
from Windows 2000-2003 Domain
MS-KBQ889250_How to decommission a Windows enterprise certification
authority and how to remove all related objects from Windows Server 2003 and
from Windows 2000 Server

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
> Once a server has been designated as an Enterprise CA within a Windows
> 2003 R2 domain, is there any way to back it out? I am trying to clean up
> some domain issues with a client's network, and it appears that someone
> attempted to implement a PKI infrastructure, but they didn't do a very
> clean job if it, so I want to try and remove the CA from the domain and
> start over cleanly. They also installed the cert server on a DC, which I
> know isn't a best practice either.


Similar ThreadsPosted
Windows 2000 Domain, Windows 2003 Enterprise CA July 15, 2005, 2:07 pm
Connection to a service under Windows 2003 enterprise October 19, 2006, 6:06 am
Windows 2003 enterprise CA issues - RPC server is unavailable. February 12, 2008, 3:27 am
Offline certificate creation fails on Windows 2003 enterprise CA without IIS March 27, 2006, 7:41 pm
Issuing Version 2 templates with Web Enrollment pages (Windows Server 2003 Enterprise) October 14, 2005, 11:58 am
Delegate Control to rename and add/remove computer from domain February 27, 2007, 4:05 pm
Windows 2003 - Child domain cannot request certificate from root domain January 11, 2008, 11:41 am
How To Get Username and Domain Name in Windows 2003? June 10, 2005, 5:03 pm
Windows 2003 Domain Security July 14, 2005, 11:06 am
Windows 2003 domain password policy September 26, 2006, 9:53 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap