From: CarolChi on
I need to rebuild a Windows 2003 DC which has an Entreprise CA.

In order to reduce the amount or work involved on the day I rebuild it, I
had hoped to move the Enterprise CA to another almost identical DC before
hand.

However I can't demote the first one because it is a target for IIFP.

Can I move my CA from one DC to another without demoting one or the other DC?

(I know that I need to review the whole PKI structure.)
--
Carol
From: Meinolf Weber [MVP-DS] on
Hello CarolChi,

Start with:
http://support.microsoft.com/kb/298138

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I need to rebuild a Windows 2003 DC which has an Entreprise CA.
>
> In order to reduce the amount or work involved on the day I rebuild
> it, I had hoped to move the Enterprise CA to another almost identical
> DC before hand.
>
> However I can't demote the first one because it is a target for IIFP.
>
> Can I move my CA from one DC to another without demoting one or the
> other DC?
>
> (I know that I need to review the whole PKI structure.)
>