Software⏱️ 3 min read📅 2026-06-19

How to Fix: Why do I get a "Get-_InternalAdcsConfigurationState is not recognized" error when uninstalling the ADCS role?

Error message when trying to uninstall ADCS role in Windows, Get-_InternalAdcsConfigurationState not recognized.

Quick Answer: Try running the command 'Get-ADCSConfiguration' instead of 'Get-_InternalAdcsConfigurationState'.

The error 'Get-_InternalAdcsConfigurationState is not recognized' occurs when attempting to uninstall the Active Directory Certificate Services (ADCS) role on a Windows system. This issue affects users who have installed ADCS and are now experiencing difficulties in removing it.

This error can be frustrating, especially for those new to Windows administration or ADCS setup. In this guide, we will walk you through the steps to resolve this issue and provide alternative solutions.

⚠️ Common Causes

  • The primary reason for this error is that the system is not properly configured to recognize the internal ADCS configuration state. This can occur due to various reasons such as incorrect installation or misconfiguration of ADCS. When ADCS is installed, it creates a unique configuration state that needs to be recognized by the system before uninstallation can proceed.
  • Another possible reason for this error is that the system's PowerShell execution policy is set too restrictive, preventing the use of certain commands required for ADCS uninstallation.

🛠️ Step-by-Step Verified Fixes

Enabling PowerShell Execution Policy

  1. Step 1: Open PowerShell as an administrator. You can do this by right-clicking on the PowerShell icon and selecting 'Run as administrator'.
  2. Step 2: Type the command `Get-ExecutionPolicy` and press Enter to check the current execution policy. The default policy is usually 'Restricted', which may be causing the issue.
  3. Step 3: To enable the execution policy, type `Set-ExecutionPolicy RemoteSigned` (or `Unrestricted` if you want to disable restrictions) and press Enter. This will allow PowerShell to execute commands from the internet and local machine.

Using the AD DS Manager

  1. Step 1: Open the AD DS Manager console. You can do this by searching for 'AD DS Manager' in the Start menu or typing `adsmd.msc` in PowerShell.
  2. Step 2: In the AD DS Manager console, navigate to the 'Certificates' section and select the ADCS certificate that you want to uninstall.

💡 Conclusion

To resolve the 'Get-_InternalAdcsConfigurationState is not recognized' error when uninstalling ADCS, enable PowerShell execution policy or use the AD DS Manager to uninstall the ADCS role. If you are still experiencing issues, try restarting your system and attempting the uninstallation again.

Did this fix your problem?

If not, try searching for specific error codes.

🔍 Search Error Database

❓ Frequently Asked Questions