Active Directory Certificate Services removal..
Check the FSMO roles are on your SBS server..
(you don’t actually need the forward slash "/" after the netdom command anymore but that’s a personal hangup from the old LANMAN days.. 😉
As for any server role just remove the role from within Server Manager
(Note the red crosses – this is from a pretty sick SBS 2008 install that had been replaced by Server 2008 R2, SCE (WSUS), and various other Windows network services over a year prior)
Once you’ve started the role removal (after confirming an informational/reading) – head out for a walk / mow the grass / build a model aeroplane.. Basically – leave it some time as you could be watching the screen below longer than paint drying
Later in the process you should see ‘Verifying removal’ and then ‘Collecting removal results…’ – ours took almost an hour between the major application events:
Information 29/08/2011 08:57:51 CertificationAuthority 38 None
Log Name: Application
Source: Microsoft-Windows-CertificationAuthority
Date: 29/08/2011 08:57:51
Event ID: 38
Task Category: None
Level: Information
Keywords: Classic
User: SYSTEM
Computer: SBSSRV01.thefullcircle.local
Description:
Active Directory Certificate Services for thefullcircle-SBSSRV01-CA was stopped.
And
Warning 29/08/2011 09:43:15 ServerManager 1619 None
Log Name: Setup
Source: Microsoft-Windows-ServerManager
Date: 29/08/2011 09:43:15
Event ID: 1619
Task Category: None
Level: Warning
Keywords:
User: THEFULLCIRCLEAdministrator
Computer: SBSSRV01.thefullcircle.local
Description:
Removal succeeded. A restart is required.
Roles:
Active Directory Certificate Services
Warning: You must restart this server to finish the removal process.
When complete (if successful) you should get:
And once ‘closed’ the only option is to restart..
You do need to log back in again (recommend same account as started this process) for the server to finalise the removal of ADCS and report ‘Resuming Configuration’ per:
Also event
Information 29/08/2011 10:10:47 ServerManager 1618 None
Log Name: Setup
Source: Microsoft-Windows-ServerManager
Date: 29/08/2011 10:10:47
Event ID: 1618
Task Category: None
Level: Information
Keywords:
User: THEFULLCIRCLEAdministrator
Computer: SBSSRV01.thefullcircle.local
Description:
Removal succeeded.
Roles:
Active Directory Certificate Services
The following role services were removed:
Certification Authority
And then next to DCPROMO out of the domain!