Certs for Domain Controllers-Trying to Prevent an Issue
- From: "Christian" <nospam@xxxxxxxxx>
- Date: Wed, 19 Mar 2008 16:28:37 GMT
Reposting this issue. It was recommended that I post to this group from
someone in the AD group.
We have three DC's, all running Windows Server 2003 w/SP2. DC1 is unstable,
and needs to be demoted before there is a serious hardware failure. DC2 and
DC3 have been brought online, and all of the FSMO roles have been moved to
them. The one remaining issue is that DC1 issued the Domain Controller
certs to DC2 and DC3. No other certs in our environment where created by
DC1, just the Domain Controller certs for DC2 and DC3. What needs to be
done in order to allow the demotion of DC1 out of AD without affecting the
certs? This server will be salvaged after the demotion.
Thank you,
-Christian
.
- Follow-Ups:
- Re: Certs for Domain Controllers-Trying to Prevent an Issue
- From: Brian Komar \(MVP\)
- Re: Certs for Domain Controllers-Trying to Prevent an Issue
- Prev by Date: Re: Password Security Policy for Local on Window 2003
- Next by Date: cannot map drive by netbios or dns name, ip ok
- Previous by thread: AD CS
- Next by thread: Re: Certs for Domain Controllers-Trying to Prevent an Issue
- Index(es):
Relevant Pages
|
