Just completed a piece of work involving Microsoft Public Key Infrastructure (PKI). One server happened to be a Stand Alone Certificate Authority, Domain Controller and critical RADIUS server providing secure authentication for a large wireless network. Our objective was to remove two roles (including that of DC) and cause no disruption to 20,000 users…….. job done.