I inherited a domain structure that has taken me awhile to clean up. Long story short, the previous administrator had no idea what he was doing. He had attempted to install root CA's on multiple occasions without knowing how to properly remove them once they were registered in AD.
Since the servers no longer exist, but the references in AD do, I am wondering if just deleting the references out of AD using adsiedit is the best way to go. I see references in schema and configuration. If there is some other method that's better, let me know.
If anyone could shed some light on this, it would be greatly appreciated.
Thanks,
David