Joy. The only things on the DC's are DNS and on one of them also runs DHCP. Other than that there's nothing else on any of 'em. Sounds like the safest route is to just stand up a new DC with the old DC's name, which puts me into the same question Ken asks.
Another question would be to ask how long would this DC need to be offline before an issue with certs would appear? I'm thinking it could be tested by simply powering it down, but if you leave a DC off for too long (tombstone period), that's not really the smartest thing either I imagine.. From: Michael B. Smith [mailto:[email protected]] Sent: Monday, November 19, 2012 12:30 PM To: NT System Admin Issues Subject: RE: Certificate server operation It means that applications on the DCs may be dependent on those certificates. From: David Lum [mailto:[email protected]] Sent: Monday, November 19, 2012 12:44 PM To: NT System Admin Issues Subject: RE: Certificate server operation The only non-expired ones use the "Domain Controller" template and are handed out to the other DC's in the same domain, what does that tell us? There are none in "pending" either. From: Michael B. Smith [mailto:[email protected]] Sent: Monday, November 19, 2012 8:06 AM To: NT System Admin Issues Subject: RE: Certificate server operation You look at the Certificate Authority MMC and see what certificates it has issued. From: David Lum [mailto:[email protected]] Sent: Monday, November 19, 2012 10:57 AM To: NT System Admin Issues Subject: Certificate server operation Is there any way to see if a Certificate Authority is actually being used and servicing requests? I have a DC that's also a CA and I would like to know if it's actually being used as a CA (if yes, I need to move it) or if I can just remove the CA from this box and then DCPROMO it out of existence. David Lum Sr. Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
