2 things, I need to decommission a enterprise root CA. I have the kb for this already so don't think I need help there.
However, Looking at the issued certificates there are only 4 still that haven't expired, 2 domain controller ones for the DC the CA is installed on (I never installed it!) 1 Subordinate Certification Authority (was for another CA on a child domain which has since been decommissioned) and the final one is and EFS Recovery Agent which the requester name is an admin account on the child domain. Apart from the type of certificate, can anyone tell me why this has been issued and where from?
Secondly, checking Group Policy for a Data Recovery Agent, the agents on both domains have expired (long ago!) issued to a user on domain controllers that no longer exist. Are these now useless? Do I need to create new ones?
Thanks in advance
George