I configured Auto Enrollment for computer certificates with our AD CA and it worked fine. However I am now decommissioning the old CA. I've set up a new CA, disabled the old CA from issuing certs (however it is still up for authenticating and CRL).
New computers added to the domain are successfully autoenrolling with my new CA. However computers that currently have a cert with the old CA aren't pulling a certificate. I tried revoking the cert on the old CA, and deleting it from local store, but neither seemed to trigger.
Any suggestions? TIA.