In a pinch, I installed AD CS on one of my DCs (running Server 2008 R2 Enterprise). I've only issued 3 certificates from it, all 3 to my RD farm. If I need to replace these certificates, that shouldn't be a big issue. I'd like to remove (or move) AD CS and put it on another Server 2008 box. Are there any special considerations when removing it from a DC? What is the proper procedure?

http://social.technet.microsoft.com/wiki/contents/articles/3527.how-to-decommission-a-windows-enterprise-certification-authority-and-how-to-remove-all-related-objects.aspxMy weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki