Want to remove an enterprise root cert authority

[Guest ASC Tech]

We have an enterprise root cert authority on a windows 2003 server

that need to be replaced.

We originally set it up just for an OWA certificate. We now have a 3rd party

cert

for this and do not need the cert server for anything else. We do not plan

on using

one anytime soon (other then 3rd party certs).

When i look at issued certificates it shows the domain controllers (1 of

which the Enterprise cert authority is installed on) and the other one.

It also shows basic EFS and machine certs - but we are NOT using IPSec or

anything that I am aware of that needs it.

We have an Exchange 2003 server in the domain also.

I was thinking of following KB889250 but am somewhat scared to death of hosing

AD or whatnot ! It looks solid, but would like a second opinion.

Any thoughts much appreciated.