Hi, My org CA is bloated with thousands of old / expired EFS certificates and have got request to delete / remove them from root CA. I'm looking for guidance on... > How can I find out if these old certs are sill not being used in the environment? > What is the best method to delete / remove these expired certs from root CA. Root CA is Windows 2003 Ent SP2 x86 TIA- thestriver

the only way (except PowerShell) is certutil.exe tool.My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki