how to remove ca from active directory
Remove all Certification Services objects from Active Directory. 1  Determine the CACommonName of the CA. 2  To do this, follow these steps: 3  Click Start, click Run, type cmd in the Open box, and then click OK. 4  Type certutil, and then press ENTER. To clean up after a CA that may have left objects in Active Directory, follow these steps to determine whether any AD objects remain: 2  Type the following command at a command line, and then press ENTER: 3  In this command, 4  represents the Name value that you determined in step 1.