Before you can install or remove Active Directory, you must remove

Hi there,

I'm trying to do a dcpromo to demote an old win 2003 dc, and I'm getting
this error:

Before you can install or remove Active Directory, you must remove
Certificate Services

Can someone point me to a kb article or something that shows how to move
this to the new server, or to another server?

Thanks in advance,
Steve.

 

see:
MS-KBQ298138_How to move a certification authority to another server

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx

 

Hi Jorge,

Thanks for that. I see you have to have the same computer name for the new
server as for the old. Is there a way you can move the certificates without
the need for a new name?

Also I know we use certificates for Outlook Web Access via ISA - is there
anything else that the certifcates would be being used for? How can I find
out? Would it be easier just to uninstall the certificate services, and
re-create the certificates required on a new server?

Thanks,
Steve.

 

server as for the old. Is there a way you can move the certificates

not that I know of

If I'm not mistaken certificates also mention for what purpose they can be
used.. (client/server auth, EFS, etc.). You can look on the certificate
itself

I do not know, because that really depends on they size of your environment
and on how many certificates have been distributed. My first thought is that
re-installing everything and re-issueing certificates might impact
operations. You need to determine that on your own

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx