Remove Failed Enterprise CA from AD?

[ADB100]

I have an old (old..) server running 2003 R2 as a Member Server that is an Enterprise CA for a domain. The server is so old it has eventually died and I don't have a backup - I know, I know, it should have been backed up and then I wouldn't have been in this situation, however it wasn't and I am (

I have other hardware (or a VM) that I can create another Enterprise CA on and I know how to do this (the install that is). The problem is I can't de-install the old server as it has died so I can't uninstall Certificate Services from it, which I assume will do other stuff to remove it from AD as well?
I have searched and found some guides on how to decommission a CA from AD (

http://support.microsoft.com/kb/889250),

however I need to do this without access to the original server. Does anyone have a guide or any tips on how to remove everything from AD? There are only a handful of servers/workstations in this domain so manually removing certificates won't be a big job.

Thanks

Andy

 

[TechyMcSe2k]

In the doc, there is:
The Certutil.exe utility
The Windows Server 2003 version of the Certutil.exe utility can be used to remove both Windows Server 2003 and Windows 2000 CAs from Active Directory. To remove a CA from Active Directory, type the following at a command prompt:
certutil -dsdel CA Name
In this example, the CA name is Windows2000 Enterprise Root CA. Therefore, the command line in this example is the following:
certutil -dsdel "Windows2000 Enterprise Root CA"

Will this work? I wonder. Anybody confirm?

 

[TechyMcSe2k]

http://support.microsoft.com/kb/555151

check this one out...maybe it will help

 

[ADB100]

Since this is only a small domain I bit the bullet and had a play around earlier. I hadn't actually seen the replies but managed to follow a similar approach to KB555151. The new CA is now in place and I have manually removed all the auto-enrolled Machine & User certificates. I also have SCEP running and a few Cisco routers, pix firewalls and AP's to enroll for new certificates.
One thing I haven't done is rebooted the DC, however it looks OK.

Thanks for the replies

Andy