Usunięcie konta z grupy Administrators na serwerach
Step-By-Step: Migrating The Active Directory Certificate Service From Windows Server 2003 to 2012 R2
https://techcommunity.microsoft.com/t5/ITOps-Talk-Blog/Step-By-Step-Migrating-The-Active-Directory-Certificate-Service/ba-p/306931