Mitigate PetitPotam in Active Directory Certificate Services
Please refer to the links at the bottom of this article for the most up-to-date links by Microsoft.
Uninstall ADCS web enrollment
A quick method is to uninstall the ADCS web enrollment (reboot required). After this, you can’t use
Then disable the web server IIS (check before if any websites/services rely on):