Removing SBS 2008 – Step 2: ADCS

 

Active Directory Certificate Services removal..

Check the FSMO roles are on your SBS server..

clip_image001

(you don’t actually need the forward slash "/" after the netdom command anymore but that’s a personal hangup from the old LANMAN days.. 😉

As for any server role just remove the role from within Server Manager

clip_image002

(Note the red crosses – this is from a pretty sick SBS 2008 install that had been replaced by Server 2008 R2, SCE (WSUS), and various other Windows network services over a year prior)

Once you’ve started the role removal (after confirming an informational/reading) – head out for a walk / mow the grass / build a model aeroplane.. Basically – leave it some time as you could be watching the screen below longer than paint drying

clip_image003

Later in the process you should see ‘Verifying removal’ and then ‘Collecting removal results…’ – ours took almost an hour between the major application events:

Information        29/08/2011 08:57:51        CertificationAuthority        38        None

Log Name: Application

Source: Microsoft-Windows-CertificationAuthority

Date: 29/08/2011 08:57:51

Event ID: 38

Task Category: None

Level: Information

Keywords: Classic

User: SYSTEM

Computer: SBSSRV01.thefullcircle.local

Description:

Active Directory Certificate Services for thefullcircle-SBSSRV01-CA was stopped.

And

Warning        29/08/2011 09:43:15        ServerManager        1619        None

Log Name: Setup

Source: Microsoft-Windows-ServerManager

Date: 29/08/2011 09:43:15

Event ID: 1619

Task Category: None

Level: Warning

Keywords:

User: THEFULLCIRCLEAdministrator

Computer: SBSSRV01.thefullcircle.local

Description:

Removal succeeded. A restart is required.

Roles:

Active Directory Certificate Services

Warning: You must restart this server to finish the removal process.

When complete (if successful) you should get:

clip_image004

And once ‘closed’ the only option is to restart..

You do need to log back in again (recommend same account as started this process) for the server to finalise the removal of ADCS and report ‘Resuming Configuration’ per:

clip_image005

clip_image006

Also event

Information        29/08/2011 10:10:47        ServerManager        1618        None

Log Name: Setup

Source: Microsoft-Windows-ServerManager

Date: 29/08/2011 10:10:47

Event ID: 1618

Task Category: None

Level: Information

Keywords:

User: THEFULLCIRCLEAdministrator

Computer: SBSSRV01.thefullcircle.local

Description:

Removal succeeded.

Roles:

Active Directory Certificate Services

The following role services were removed:

Certification Authority

And then next to DCPROMO out of the domain!